!wdfkd.wdfumdownirp
The !wdfkd.wdfumdownirp extension displays the kernel-mode I/O request packet (IRP) that is associated with a specified user-mode IRP. This command is used in two steps. See Remarks.
!wdfkd.wdfumdownirp UmIrp [FileObject]
Parameters
UmIrp
Specifies the address of a user mode IRP. You can use !wdfkd.wdfumirps to get the addresses of UM IRPs in the implicit process.
FileObject
Specifies the address of a _FILE_OBJECT structure. For information about how to get this address, see Remarks.
DLL
Wdfkd.dll
Frameworks
UMDF 2
Additional Information
For more information, see Kernel-Mode Driver Framework Debugging.
Remarks
You can use this command in a kernel-mode debugging session or in a user-mode debugging session that is attached to the UMDF host process (wudfhost.exe).
To use this command, follow these steps:
- Enter this command, passing only the address a user-mode IRP. The command displays a handle.
- Pass the displayed handle to the !handle command. In the output of !handle, find the address of a _FILE_OBJECT structure.
- Enter this command again, passing both the address of the user-mode IRP and the address of the _FILE_OBJECT structure.
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for