*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {a4a11000, 0, 8b6e71af, 0}
Unable to load image \SystemRoot\system32\DRIVERS\PSINAflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for PSINAflt.sys
*** ERROR: Module load completed but symbols could not be loaded for PSINAflt.sys
*** WARNING: Unable to verify timestamp for psinknc.sys
*** ERROR: Module load completed but symbols could not be loaded for psinknc.sys
*** WARNING: Unable to verify timestamp for PSINFile.sys
*** ERROR: Module load completed but symbols could not be loaded for PSINFile.sys
Could not read faulting driver name
Probably caused by : PSINAflt.sys ( PSINAflt+101af )
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a4a11000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8b6e71af, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from 81bae848
Unable to read MiSystemVaType memory at 81b8de20
a4a11000
FAULTING_IP:
PSINAflt+101af
8b6e71af 0fb719 movzx ebx,word ptr [ecx]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: setup.exe
CURRENT_IRQL: 0
TRAP_FRAME: a78e4670 -- (.trap 0xffffffffa78e4670)
ErrCode = 00000000
eax=a4a11000 ebx=8b6f6000 ecx=a4a11000 edx=a4a10f80 esi=a78e4720 edi=a78e4710
eip=8b6e71af esp=a78e46e4 ebp=a78e46f4 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
PSINAflt+0x101af:
8b6e71af 0fb719 movzx ebx,word ptr [ecx] ds:0023:a4a11000=????
Resetting default scope
LAST_CONTROL_TRANSFER: from 81a863d8 to 81ad340b
STACK_TEXT:
a78e4658 81a863d8 00000000 a4a11000 00000000 nt!MmAccessFault+0x106
a78e4658 8b6e71af 00000000 a4a11000 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
a78e46f4 8b6e221a a78e4710 a78e4720 00000000 PSINAflt+0x101af
a78e4730 8b6e29fd 5ab56363 00000000 a78e4780 PSINAflt+0xb21a
a78e4784 8640e15b 00000000 00000000 839262b0 PSINAflt+0xb9fd
a78e4798 8640446f 85db3b58 85d57cb0 839262b0 psinknc+0xe15b
a78e47cc 864046a7 00000000 019262b0 864181ec psinknc+0x446f
a78e47e8 864048be 00000000 00011785 a78e4864 psinknc+0x46a7
a78e4804 8b736695 00000000 00011785 00000000 psinknc+0x48be
a78e4824 8b732c58 85dc23f0 839262b0 a78e48cc PSINFile+0x6695
a78e484c 8b734fd5 018e4864 83928008 839280c0 PSINFile+0x2c58
a78e4894 8b734010 83928068 a78e48cc 00000000 PSINFile+0x4fd5
a78e48a8 8655a324 83928068 a78e48cc 01010101 PSINFile+0x4010
a78e4910 8655d512 00928008 83928008 1000000c fltmgr!FltpPerformPostCallbacks+0x24a
a78e4924 8655db46 83928008 83926008 a78e4964 fltmgr!FltpProcessIoCompletion+0x10
a78e4934 8655e29c 8527e340 83926008 83928008 fltmgr!FltpPassThroughCompletion+0x98
a78e4964 865718c9 a78e4984 00000000 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x33a
a78e49b0 81a7c593 8527e340 85278008 8385a214 fltmgr!FltpCreate+0x2db
a78e49c8 81c8b2ad be502513 a78e4b70 00000000 nt!IofCallDriver+0x63
a78e4aa0 81c6aab5 84e5bba8 c5790330 a4a29ad0 nt!IopParseDevice+0xed7
a78e4b1c 81c7aec6 00000000 a78e4b70 00000040 nt!ObpLookupObjectName+0x4fa
a78e4b78 81c9dac7 00dcf298 83790330 00000401 nt!ObOpenObjectByName+0x165
a78e4d24 81a831ea 00dcf298 00dcf270 00dcf2b8 nt!NtQueryAttributesFile+0x121
a78e4d24 77a870b4 00dcf298 00dcf270 00dcf2b8 nt!KiFastCallEntry+0x12a
00dcf2b8 00000000 00000000 00000000 00000000 0x77a870b4
STACK_COMMAND: kb
FOLLOWUP_IP:
PSINAflt+101af
8b6e71af 0fb719 movzx ebx,word ptr [ecx]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: PSINAflt+101af
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: PSINAflt
IMAGE_NAME: PSINAflt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4e12e174
FAILURE_BUCKET_ID: 0x50_PSINAflt+101af
BUCKET_ID: 0x50_PSINAflt+101af
Followup: MachineOwner
---------
