!idt显示指定的中断分配表(interrupt dispatch table (IDT))中的中断服务例程(interrupt service routine (ISR))
最典型的自陷int 2e,其中断表使用的是:
lkd> !idt 2e Dumping IDT: 2e: 82c8369e nt!KiSystemService
如不指定IDT,会简短的显示目标机中所有处理器的IDT:
lkd> !idt Dumping IDT: 37: 82c29104 hal!PicSpuriousService37 51: 85e672d8 ataport!IdePortInterrupt (KINTERRUPT 85e67280) ataport!IdePortInterrupt (KINTERRUPT 85e67000) 80: 869412d8 ndis!ndisMiniportMessageIsr (KINTERRUPT 86941280) 82: 86941cd8 9517ef00 (KINTERRUPT 86941c80) 90: 85e67558 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67500) 91: 86fc4cd8 9460749a (KINTERRUPT 86fc4c80) 92: 86941a58 9519b486 (KINTERRUPT 86941a00) 951b67ab (KINTERRUPT 86941780) 9509dd47 (KINTERRUPT 86fc4a00) a0: 85e677d8 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67780) a2: 86941558 9517ef00 (KINTERRUPT 86941500) b0: 85e67a58 pci!ExpressRootPortMessageRoutine (KINTERRUPT 85e67a00) b1: 85e67cd8 ACPI!ACPIInterruptServiceRoutine (KINTERRUPT 85e67c80) b2: 86941058 951b67ab (KINTERRUPT 86941000) c1: 82c293f4 hal!HalpBroadcastCallService d1: 82c11634 hal!HalpHpetClockInterrupt d2: 82c11898 hal!HalpHpetRolloverInterrupt df: 82c291dc hal!HalpApicRebootService e1: 82c29958 hal!HalpIpiHandler e3: 82c296f8 hal!HalpLocalApicErrorService fd: 82c29f2c hal!HalpProfileInterrupt fe: 82c2a1a8 hal!HalpPerfInterrupt
如果指定了-a,则显示所有IDT的ISR
lkd> !idt -a Dumping IDT: 00: 82c84670 nt!KiTrap00 01: 82c84800 nt!KiTrap01 02: Task Selector = 0x0058 03: 82c46ffb nt!_imp__VidBitBlt <PERF> (nt+0xffb) 04: 82c84df8 nt!KiTrap04 05: 82c84f58 nt!KiTrap05 06: 82c850cc nt!KiTrap06 07: 82c856c8 nt!KiTrap07 08: Task Selector = 0x0050 09: 82c85b28 nt!KiTrap09 0a: 82c85c4c nt!KiTrap0A 0b: 82c85d8c nt!KiTrap0B 0c: 82c85fec nt!KiTrap0C 0d: 82c862dc nt!KiTrap0D 0e: 82c869ac nt!KiTrap0E 0f: 82c86d60 nt!KiTrap0F 10: 82c86e84 nt!KiTrap10 11: 82c86fc4 nt!KiTrap11 12: Task Selector = 0x00A0