Inside Show  - Channel 9

.trap


Listen Later

The .trap command change to, and displays the trap frame register state of the context at the specified address. Trap Frames only exist in Kernel Mode. Trap Frames are used to store the registers of the current thread when an interrupt occurs, or when there is a system service call (the transfer from user mode to kernel mode). Note, each trap frame scenario stores only a subset of the registers. To view the trap frames on the current thread, use the kv command. The address of each trap frame is listed as a postfix on each frame that was trapped. Additional Resources: Inside - .ecxr (Change to and Display the Exception Context Record)Inside - .cxr (Change to and Display a Context structure)Inside - Windows SDKMicrosoft Docs - Debugging Tools for WindowsMicrosoft Docs - .cxr (Change to and Display Context Record)Microsoft Docs - .ecxr (Change to and Display Exception Context Record)Microsoft Docs - trap (Display Trap Frame)
...more
View all episodesView all episodes
Download on the App Store

Inside Show  - Channel 9By Microsoft