BROADCASTS.com

The .trap command change to, and displays the trap frame register state of the context at the specified address. Trap Frames only exist in Kernel Mode. Trap Frames are used to store the registers of the current thread when an interrupt occurs, or when there is a system service call (the transfer from user mode to kernel mode). Note, each trap frame scenario stores only a subset of the registers.

To view the trap frames on the current thread, use the kv command. The address of each trap frame is listed as a postfix on each frame that was trapped.

Additional Resources:

• Inside - .ecxr (Change to and Display the Exception Context Record)
• Inside - .cxr (Change to and Display a Context structure)
• Inside - Windows SDK
• Microsoft Docs - Debugging Tools for Windows
• Microsoft Docs - .cxr (Change to and Display Context Record)
• Microsoft Docs - .ecxr (Change to and Display Exception Context Record)
• Microsoft Docs - trap (Display Trap Frame)