WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81d315ac
Unable to read MiSystemVaType memory at 81d117e0
ea81cab3
FAULTING_IP:
nt!MiRelocateImageAgain+38
81de2ca9 f00fba2800 lock bts dword ptr [eax],0
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
TRAP_FRAME: b0f2f78c -- (.trap 0xffffffffb0f2f78c)
ErrCode = 00000002
eax=ea81cab3 ebx=90c0c4d8 ecx=b1625030 edx=78890004 esi=b1625030 edi=ea81cab3
eip=81de2ca9 esp=b0f2f800 ebp=b0f2f814 iopl=0 nv up ei ng nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
nt!MiRelocateImageAgain+0x38:
81de2ca9 f00fba2800 lock bts dword ptr [eax],0 ds:0023:ea81cab3=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 81c8fc44 to 81ca9ff2
STACK_TEXT:
b0f2f774 81c8fc44 00000001 ea81cab3 00000000 nt!MmAccessFault+0x106
b0f2f774 81de2ca9 00000001 ea81cab3 00000000 nt!KiTrap0E+0xdc
b0f2f814 81dd7fda 94fd2048 00000000 00000000 nt!MiRelocateImageAgain+0x38
b0f2f928 81dd7a02 b0f2f97c 0000000d b0f2f9d0 nt!MmCreateSection+0x521
b0f2f99c 81dfd072 b0f2fa2c 0000000d b0f2f9d0 nt!NtCreateSection+0x165
b0f2fa18 81dfd53a b0f2faec b454b7a8 00000001 nt!PfpFileBuildReadSupport+0xe4
b0f2faac 81dfda20 00f2faec b0f2fbe4 00000001 nt!PfpPrefetchFilesTrickle+0xdf
b0f2fb00 81dfbe96 b4548000 b0f24014 b0f2fbf8 nt!PfpPrefetchRequestPerform+0x295
b0f2fb54 81dfad72 b0f2fbe4 00000001 b0f24758 nt!PfpPrefetchRequest+0x16e
b0f2fc18 81e8362a 03c6f7dc 00000014 00000001 nt!PfSetSuperfetchInformation+0x182
b0f2fd50 81c8cb1a 0000004f 00000000 00000014 nt!NtSetSystemInformation+0x90e
b0f2fd50 77790f34 0000004f 00000000 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
03c6f7f4 00000000 00000000 00000000 00000000 0x77790f34
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiRelocateImageAgain+38
81de2ca9 f00fba2800 lock bts dword ptr [eax],0
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!MiRelocateImageAgain+38
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4b7d25c9
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x50_nt!MiRelocateImageAgain+38
BUCKET_ID: 0x50_nt!MiRelocateImageAgain+38
Followup: MachineOwner