Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\dmp\050510-45921-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0x82c4f000 PsLoadedModuleList = 0x82d97810
Debug session time: Wed May 5 23:45:00.019 2010 (GMT-4)
System Uptime: 0 days 0:07:13.654
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
.....
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ea50570c, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 839a962a, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
Unable to load image \SystemRoot\System32\Drivers\AppleMNT.sys, Win32 error 0n2
*** ERROR: Module load completed but symbols could not be loaded for AppleMNT.sys
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from 82db7718
Unable to read MiSystemVaType memory at 82d97160
ea50570c
FAULTING_IP:
AppleMNT+62a
839a962a 8b0a mov ecx,dword ptr [edx]
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: SearchProtocol
CURRENT_IRQL: 0
TRAP_FRAME: 8ac03a68 -- (.trap 0xffffffff8ac03a68)
ErrCode = 00000000
eax=ea614c1b ebx=82c59aa9 ecx=0010f50f edx=ea50570c esi=00ff00e8 edi=00ff0000
eip=839a962a esp=8ac03adc ebp=8ac03b08 iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
AppleMNT+0x62a:
839a962a 8b0a mov ecx,dword ptr [edx] ds:0023:ea50570c=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82c95638 to 82cd4903
STACK_TEXT:
8ac03a50 82c95638 00000000 ea50570c 00000000 nt!MmAccessFault+0x106
8ac03a50 839a962a 00000000 ea50570c 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
8ac03b08 839a968c 00ff0000 8ac03b3c 82ecf137 AppleMNT+0x62a
8ac03b14 82ecf137 865ee630 000017f4 8ac03b64 AppleMNT+0x68c
8ac03b3c 82ea4b7a 865ee630 000017f4 82d8fb04 nt!PsCallImageNotifyRoutines+0x62
8ac03be8 82ebd929 86ad2610 84cff030 8ac03ce4 nt!MiMapViewOfImageSection+0x7fd
8ac03c58 82ece1f1 84cff030 8ac03ce4 00000000 nt!MiMapViewOfSection+0x22e
8ac03c88 82ece11c 94f40170 84cff030 8ac03ce4 nt!MmMapViewOfSection+0x2a
8ac03d04 82c9244a 00000514 ffffffff 00b39360 nt!NtMapViewOfSection+0x204
8ac03d04 776464f4 00000514 ffffffff 00b39360 nt!KiFastCallEntry+0x12a
00b3946c 00000000 00000000 00000000 00000000 0x776464f4
STACK_COMMAND: kb
FOLLOWUP_IP:
AppleMNT+62a
839a962a 8b0a mov ecx,dword ptr [edx]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: AppleMNT+62a
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: AppleMNT
IMAGE_NAME: AppleMNT.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4b37c741
FAILURE_BUCKET_ID: 0x50_AppleMNT+62a
BUCKET_ID: 0x50_AppleMNT+62a
Followup: MachineOwner
---------