驱动蓝屏后简单的分析dump文件

1: kd> !analyze–v

Debugging Details:

------------------

 

*** ERROR: Moduleload completed but symbols could not be loaded for ntnfapi.sys

 

EXCEPTION_CODE:(NTSTATUS) 0xc0000005 - 0x%08lx

 

FAULTING_IP: (FAULTING_IP表示引起这个错误的指令的指针。)

ntnfapi+1f0e

a4546f0e 8b7014          mov     esi,dword ptr [eax+14h]

 

TRAP_FRAME:  a2a72aa0-- (.trap 0xffffffffa2a72aa0)

ErrCode = 00000000

eax=00000000ebx=886048e0 ecx=a2a72b3c edx=87f1f790esi=88604828 edi=00000006

eip=a4546f0e esp=a2a72b14 ebp=a2a72b18iopl=0         nv up ei ng nz na po nc

cs=0008  ss=0010 ds=0023  es=0023  fs=0030 gs=0000             efl=00010282

ntnfapi+0x1f0e:

a4546f0e 8b7014          mov     esi,dword ptr [eax+14h]ds:0023:00000014=????????

<