Mac Debug win Kernel (Dual virtual machine Debug) environment configuration

Commissioning machine: win7+windbg
Machine being debugged: XP
Virtual machines: VMS

Modify VM configuration Add serial port

Right-click to display the contents of the package and edit the. VMX post-stamp file to add the following configuration

Win7 (Debug machine):
Serial0.present = "TRUE"
Serial0.filetype = "Pipe"
serial0.startconnected = "TRUE"
Serial0.filename = "/users/jibin/downloads/serial"
Serial0.trynorxloss = "FALSE"
Serial0.pipe.endPoint = "Client"

XP (debugged Machine):
Serial0.present = "TRUE"
Serial0.filetype = "Pipe"
Serial0.filename = "/users/jibin/downloads/serial"
Serial0.trynorxloss = "FALSE"
Serial0.pipe.endPoint = "Server"

Modify System Configuration

Right-click My Computer, management, Device Manager, Port
Locate the following COM1, right-click Properties, port Settings, and change the baud rate to 115200.
(Two virtual machines need to be modified, XP needs to modify the boot. ini file, as described below)

Set C:\Boot.ini (Enter C:\Boot.ini in ' run ' to open the boot. ini file)
This step directly opens the debugging function, if the xin7 need to be modified in the System Configuration reference article is the double Win7.

[boot loader]timeout=30default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS[operating systems]multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="XP Professional with Kernel Debugging" /noexecute=optin /fastdetect /debug /debugport=COM1 /baudrate=115200multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

/debug Turn on kernel debugging
/debugport=com1 tells the system which port to use to link the debug system to the system being debugged
/BAUDRATE=115200 data transfer rate for specified serial port

Start debugging

Restart the debug machine XP to stay in the boot interface

To open WinDbg for configuration in the debug machine win7
File--Kernel debug ...

Then restart the debug machine XP

Reference:
Https://bbs.pediy.com/thread-222660.htm
"Malicious code Analysis in Combat" chapter tenth

Mac Debug win Kernel (Dual virtual machine Debug) environment configuration