Debugging Stop 0x1E - Finding the Exception Record Address in the Stack

This is going to be a very short blog post, just to demonstrate how to find the Exception Record address in the stack, and how many times it seems to appear within the call stack. Interestingly, but not unsurprisingly, the exception code wasn't passed to any of the exception handlers in the call stack.

The blue highlighting is the address of the exception record, and the green highlighting is the address of the trap frame which contains the last saved context.

The !exchain extension shows all the exception handlers in the call stack.

The _CONTEXT data structure can show us the saved registers from the trap frame. Please note I've omitted this data structure to the main registers.