0

windbg : how to find driverentry in live debugging?

Ex) if 'nt' the target...

kd> lmvm nt
Browse full module list
start             end                 module name
fffff802`1bc00000 fffff802`1cc47000   nt         (pdb symbols)  
...

kd> !dh fffff802`1bc00000
...
A71010 address of entry point
...

// not driverentry 
kd> u fffff802`1bc00000+0xA71010 L1 
nt!KiSystemStartup:
fffff802`1c671010 4883ec38        sub     rsp,38h
jimmy
  • 1
  • 1

0 Answers0