windbg命令----!idt
!idt扩展显示指定的中断分配表(interrupt dispatch table (IDT))中的中断服务例程(interrupt service routine (ISR))
简短方式:
kd> !idt Dumping IDT: 37: 806e6864 hal!PicSpuriousService37 3d: 806e7e2c hal!HalpApcInterrupt 41: 806e7c88 hal!HalpDispatchInterrupt 50: 806e693c hal!HalpApicRebootService 62: 82494044 atapi!IdePortInterrupt (KINTERRUPT 82494008) 63: 82506dd4 USBPORT!USBPORT_InterruptService (KINTERRUPT 82506d98) 73: 824942cc SCSIPORT!ScsiPortInterrupt (KINTERRUPT 82494290) USBPORT!USBPORT_InterruptService (KINTERRUPT 82500b28) 82: 822c1b3c atapi!IdePortInterrupt (KINTERRUPT 822c1b00) 83: 8208f82c *** ERROR: Symbol file could not be found. Defaulted to export symbols for vmci.sys - vmci!DllUnload+0x80C (KINTERRUPT 8208f7f0) VIDEOPRT!pVideoPortInterrupt (KINTERRUPT 82099548) portcls!CKsShellRequestor::`scalar deleting destructor'+0x26 (KINTERRUPT 81f4f450) 92: 82506844 serial!SerialCIsrSw (KINTERRUPT 82506808) 93: 82073044 i8042prt!I8042KeyboardInterruptService (KINTERRUPT 82073008) a3: 82073364 i8042prt!I8042MouseInterruptService (KINTERRUPT 82073328) b1: 8253b85c ACPI!ACPIInterruptServiceRoutine (KINTERRUPT 8253b820) b4: 8248d57c NDIS!ndisMIsr (KINTERRUPT 8248d540) c1: 806e6ac0 hal!HalpBroadcastCallService d1: 806e5e54 hal!HalpClockInterrupt e1: 806e7048 hal!HalpIpiHandler e3: 806e6dac hal!HalpLocalApicErrorService fd: 806e75a8 hal!HalpProfileInterrupt fe: 806e7748 hal!HalpPerfInterrupt
完整:(取部分显示出来)
kd> !idt -a Dumping IDT: 00: 805431a0 nt!KiTrap00 01: 8054331c nt!KiTrap01 02: Task Selector = 0x0058 03: 80543730 nt!KiTrap03 04: 805438b0 nt!KiTrap04 05: 80543a10 nt!KiTrap05 06: 80543b84 nt!KiTrap06 07: 805441fc nt!KiTrap07 08: Task Selector = 0x0050 09: 80544600 nt!KiTrap09 0a: 80544720 nt!KiTrap0A 0b: 80544860 nt!KiTrap0B 0c: 80544ac0 nt!KiTrap0C 0d: 80544dac nt!KiTrap0D 0e: 805454a8 nt!KiTrap0E 0f: 805457e0 nt!KiTrap0F 10: 80545900 nt!KiTrap10 11: 80545a3c nt!KiTrap11 12: Task Selector = 0x00A0 13: 80545ba4 nt!KiTrap13 14: 805457e0 nt!KiTrap0F 15: 805457e0 nt!KiTrap0F 16: 805457e0 nt!KiTrap0F 17: 805457e0 nt!KiTrap0F
也可以指定中断号显示:
kd> !idt 3 Dumping IDT: 03: 80543730 nt!KiTrap03