这是一个创建于 2377 天前的主题，其中的信息可能已经有所发展或是发生改变。
最近经常蓝屏，蓝屏代码每次都一样，但是又不怎么会用 Windbg。
求大神指教一下如何使用 Windbg。
顺便附上 DMP 文件：
链接： https://pan.baidu.com/s/1k0MyWlv-cmdes7Bm7I2Viw
提取码：53c9
在顺便贴点 DMP 信息：
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: fffff8015eddfbae, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000008, value 0 = read operation, 1 = write operation Arg4: fffff8015eddfbae, address which referenced memory TRAP_FRAME: ffffb78a58ba9450 -- (.trap 0xffffb78a58ba9450) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000334000 rbx=0000000000000000 rcx=00000000c0000100 rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8015eddfbae rsp=ffffb78a58ba95e0 rbp=000024edbd9bbfff r8=ffffb98be2cc3080 r9=0000000000000002 r10=0000000100000092 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na po nc fffff801`5eddfbae ?? ??? Resetting default scope LAST_CONTROL_TRANSFER: from fffff80118ddd869 to fffff80118dcc130 FAILED_INSTRUCTION_ADDRESS: +0 fffff801`5eddfbae ?? ??? STACK_TEXT: ffffb78a`58ba9308 fffff801`18ddd869 : 00000000`0000000a fffff801`5eddfbae 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx ffffb78a`58ba9310 fffff801`18dd9c8e : 000024ed`bd9bbfff ffffb78a`58ba9600 ffffb98b`00000001 ffffb98b`00000000 : nt!KiBugCheckDispatch+0x69 ffffb78a`58ba9450 fffff801`5eddfbae : 000024ed`bd9bbfff 00000000`00000000 fffff801`00000001 ffffa700`00000000 : nt!KiPageFault+0x44e ffffb78a`58ba95e0 000024ed`bd9bbfff : 00000000`00000000 fffff801`00000001 ffffa700`00000000 fffff801`18c1b000 : 0xfffff801`5eddfbae ffffb78a`58ba95e8 00000000`00000000 : fffff801`00000001 ffffa700`00000000 fffff801`18c1b000 00000000`00000000 : 0x000024ed`bd9bbfff THREAD_SHA1_HASH_MOD_FUNC: bf99962f16aee8a6a536cfcc5454c0cd4db15ac9 THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2053c9cd60dcbe7f477419e6aee8664b1711298a THREAD_SHA1_HASH_MOD: 2a7ca9d3ab5386d53fea7498e1d81b9c4a4c036b FOLLOWUP_IP: nt!KiPageFault+44e fffff801`18dd9c8e 33c0 xor eax,eax FAULT_INSTR_CODE: ffb0c033 SYMBOL_STACK_INDEX: 2 SYMBOL_NAME: nt!KiPageFault+44e FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe  | 1 q9339 2019-04-26 14:23:57 +08:00 下雨 跳闸，win10 蓝屏 无法进入桌面。。 只能重装吗？ |
 | 2 xomix 2019-04-26 14:45:36 +08:00 |
 | 3 kuichieh 2019-04-26 15:34:35 +08:00 貌似 steam 和驱动的问题? 我的方法是设置 symbol search path 为 srv*d:\xxx*https://msdl.microsoft.com/download/symbols => open crash dump => !analyze -v Debugging Details: ------------------ KEY_VALUES_STRING: 1 STACKHASH_ANALYSIS: 1 TIMELINE_ANALYSIS: 1 DUMP_CLASS: 1 DUMP_QUALIFIER: 400 BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434 DUMP_TYPE: 2 BUGCHECK_P1: fffff8015eddfbae BUGCHECK_P2: 2 BUGCHECK_P3: 8 BUGCHECK_P4: fffff8015eddfbae READ_ADDRESS: fffff8011915e390: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd fffff8015eddfbae CURRENT_IRQL: 2 FAULTING_IP: +0 fffff801`5eddfbae ?? ??? CPU_COUNT: c CPU_MHZ: c78 CPU_VENDOR: GenuineIntel CPU_FAMILY: 6 CPU_MODEL: 9e CPU_STEPPING: a CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR AV PROCESS_NAME: Steam.exe |
 | 4 ashong 2019-04-26 16:04:01 +08:00 以前经历过类似问题， 看看是不是某个 usb 外设导致的， 另外就是磁盘损坏导致 pagefile 受损， 试试检查磁盘并修复，禁用 pagefile 试试 |
 | 5 yksoft1ex 2019-04-26 16:43:29 +08:00 记得如果是第三方驱动挂了，用 BlueScreenView 这个小工具就能看到 stack 里面的模块名。 |
Select Language