Edit

Share via

!wdfkd.wdfumdownirp

  • Article

The !wdfkd.wdfumdownirp extension displays the kernel-mode I/O request packet (IRP) that is associated with a specified user-mode IRP. This command is used in two steps. See Remarks.

!wdfkd.wdfumdownirp UmIrp [FileObject]

Parameters

UmIrp
Specifies the address of a user mode IRP. You can use !wdfkd.wdfumirps to get the addresses of UM IRPs in the implicit process.

FileObject
Specifies the address of a _FILE_OBJECT structure. For information about how to get this address, see Remarks.

DLL

Wdfkd.dll

Frameworks

UMDF 2

Additional Information

For more information, see Kernel-Mode Driver Framework Debugging.

Remarks

You can use this command in a kernel-mode debugging session or in a user-mode debugging session that is attached to the UMDF host process (wudfhost.exe).

To use this command, follow these steps:

  1. Enter this command, passing only the address a user-mode IRP. The command displays a handle.
  2. Pass the displayed handle to the !handle command. In the output of !handle, find the address of a _FILE_OBJECT structure.
  3. Enter this command again, passing both the address of the user-mode IRP and the address of the _FILE_OBJECT structure.