Debugging a driver with WinDbg - How set a breakpoint at DriverEntry?

3

I have a driver which is, for some unknown reasons causing a bugcheck 0x0000003b.

So I decided to set up a Hyper-V VM and use kernel debugging to see what exactly is going on. I already enable testing signing with bcdedit, and checked that the driver is indeed loaded and running with sc query. The problem is that I want WinDbg to step in ONLY when the offending driver is being called and not when the windows debugee is booting, how can I do that? How do I instruct windbg to pause at the DriverEntry function of my driver?

c
windows
debugging
kernel
wdm
asked on Stack Overflow May 5, 2020 by Trey • edited May 5, 2020 by Trey

1 Answer

2

You can add a breakpoint at DriverEntry using command 'bm DriverName!DriverEntry'.

answered on Stack Overflow May 16, 2020 by Michael Kim

User contributions licensed under CC BY-SA 3.0