bdump icon indicating copy to clipboard operation
bdump copied to clipboard

CR8/IRQL Register

Open p0w1 opened this issue 2 years ago • 0 comments

The CR8 register ist set to 0xf when WinDBG is in a breakpoint. Consequently, this value is stored to the regs.json file. However, this is not the correct value before the breakpoint was hit

kd> r cr8
cr8=000000000000000f
kd> !irql
Debugger saved IRQL for processor 0x0 -- 0 (LOW_LEVEL)

p0w1 avatar Oct 31 '23 07:10 p0w1