The !wdfkd.wdfumdownirp extension displays the kernel-mode I/O request packet (IRP) that is associated with a specified user-mode IRP. This command is used in two steps. See Remarks.
!wdfkd.wdfumdownirp UmIrp [FileObject]
Specifies the address of a _FILE_OBJECT structure. For information about how to get this address, see Remarks.
For more information, see Kernel-Mode Driver Framework Debugging.
You can use this command in a kernel-mode debugging session or in a user-mode debugging session that is attached to the UMDF host process (wudfhost.exe).
To use this command, follow these steps:
- Enter this command, passing only the address a user-mode IRP. The command displays a handle.
- Pass the displayed handle to the !handle command. In the output of !handle, find the address of a _FILE_OBJECT structure.
- Enter this command again, passing both the address of the user-mode IRP and the address of the _FILE_OBJECT structure.
Send feedback about: