Defrag Tools: #27 - WinDbg - Configure Kernel Debugging | Defrag Tools

[EDN Admin]

In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.
This installment goes over the cables and configuration steps required to set up kernel mode debugging.
We use these BCDEdit commands:

• bcdedit
• bcdedit /dbgsettings
• bcdedit /dbgsettings 1394 channel:42
• bcdedit /dbgsettings net hostip:192.168.0.10 port:50000 key:a.b.c.d
• bcdedit /debug on
• bcdedit /debug off

In the debug session, we use these commands:

• .crash
• .dump /f
• lm
• !lmi
• .reload /f
• !drvobj
• !drvobj <module> 2
• bl
• bc *
• be <N>
• bd <N>
• bp <function>
• bm <wildcard>
• x <wildcard>
• g

Make sure you watch Defrag Tools Episode #1 and Defrag Tools Episode #23 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbol and source code resolution.
Resources:
NT Debugging Blog - How to Setup a Debug Crash Cart to Prevent Your Server from Flat Lining
USBView
USB3 Debugging Cable
- Note, you must use a USB3 A-A cable designed for debugging, otherwise it will fry your box!
Timeline:
[00:45] - Kernel Debugging Cables
[02:14] - USB 2.0
[04:13] - USB 3.0 - New in Windows 8/Windows RT
[05:30] - 1394 (Firewire)
[10:39] - Break
[11:38] - Driver Objects
[16:00] - Network - New in Windows 8/Windows RT
[17:30] - Breakpoint commands
[26:00] - Network - BCDEdit
[33:37] - SecureBoot and BitLocker

View the full article