Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\Mini031810-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18377.x86fre.vistasp1_gdr.091208-0542
Machine Name:
Kernel base = 0x81e3e000 PsLoadedModuleList = 0x81f55c70
Debug session time: Thu Mar 18 22:10:19.319 2010 (GMT-5)
System Uptime: 0 days 19:42:13.283
Loading Kernel Symbols
...............................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000008E, {c0000005, 82028b43, 980cbaf4, 0}
Probably caused by : memory_corruption ( nt!MiPerformFixups+61 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82028b43, The address that the exception occurred at
Arg3: 980cbaf4, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!MiPerformFixups+61
82028b43 8b7904 mov edi,dword ptr [ecx+4]
TRAP_FRAME: 980cbaf4 -- (.trap 0xffffffff980cbaf4)
ErrCode = 00000000
eax=00000fff ebx=94257178 ecx=39000000 edx=39000000 esi=98140000 edi=94257178
eip=82028b43 esp=980cbb68 ebp=980cbb94 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiPerformFixups+0x61:
82028b43 8b7904 mov edi,dword ptr [ecx+4] ds:0023:39000004=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: WerFault.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 8204fcfb to 82028b43
STACK_TEXT:
980cbb94 8204fcfb 8c143a10 543d0000 00000001 nt!MiPerformFixups+0x61
980cbbb8 81ec79ac 8c143a10 00000000 00000004 nt!MiRelocateImagePfn+0xfe
980cbc1c 81ec2dbe 84041008 980cbc78 a175b660 nt!MiWaitForInPageComplete+0x17d
980cbcd0 81ee503f 74e8400c 94282180 00000000 nt!MiDispatchFault+0xd85
980cbd4c 81e98bf4 00000000 74e8400c 00000001 nt!MmAccessFault+0x1fb7
980cbd4c 76dfd160 00000000 74e8400c 00000001 nt!KiTrap0E+0xdc
WARNING: Frame IP not in any known module. Following frames may be wrong.
001dc3ec 00000000 00000000 00000000 00000000 0x76dfd160
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiPerformFixups+61
82028b43 8b7904 mov edi,dword ptr [ecx+4]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiPerformFixups+61
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4b1e892f
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x8E_nt!MiPerformFixups+61
BUCKET_ID: 0x8E_nt!MiPerformFixups+61
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\Mini032110-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0x81e1d000 PsLoadedModuleList = 0x81f34c70
Debug session time: Sun Mar 21 15:24:53.502 2010 (GMT-5)
System Uptime: 2 days 14:06:37.872
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82066402, The address that the exception occurred at
Arg3: 9bad7c90, Trap Frame
Arg4: 00000000
Debugging Details:
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: 81e1d000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4b1e892f
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt+249402
82066402 33c9 xor ecx,ecx
TRAP_FRAME: 9bad7c90 -- (.trap 0xffffffff9bad7c90)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=98840f70 edx=00000001 esi=842f7148 edi=00000000
eip=82066402 esp=9bad7d04 ebp=9bad7d50 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt+0x249402:
82066402 33c9 xor ecx,ecx
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81e74a9a to 82066402
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
9bad7d50 81e74a9a 000015b8 00000000 00000000 nt+0x249402
9bad7d64 77939a94 badb0d00 02ddefb4 00000000 nt+0x57a9a
9bad7d68 badb0d00 02ddefb4 00000000 00000000 0x77939a94
9bad7d6c 02ddefb4 00000000 00000000 00000000 0xbadb0d00
9bad7d70 00000000 00000000 00000000 00000000 0x2ddefb4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt+249402
82066402 33c9 xor ecx,ecx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+249402
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntkrnlpa.exe
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
80407000 8040f000 kdcom kdcom.dll Sat Jan 19 09:31:53 2008 (4791A769)
8040f000 80420000 PSHED PSHED.dll Sat Jan 19 09:31:21 2008 (4791A749)
80420000 80428000 BOOTVID BOOTVID.dll Sat Jan 19 09:27:15 2008 (4791A653)
80428000 80469000 CLFS CLFS.SYS Sat Jan 19 07:28:01 2008 (47918A61)
80469000 80549000 CI CI.dll Fri Feb 22 07:00:56 2008 (47BE5708)
80549000 805c5000 Wdf01000 Wdf01000.sys Sat Jan 19 07:52:21 2008 (47919015)
805c5000 805d2000 WDFLDR WDFLDR.SYS Sat Jan 19 07:52:19 2008 (47919013)
805d2000 805fc000 ks ks.sys Sat Jan 19 07:49:21 2008 (47918F61)
80606000 8064c000 acpi acpi.sys Sat Jan 19 07:32:48 2008 (47918B80)
8064c000 80655000 WMILIB WMILIB.SYS Sat Jan 19 07:53:08 2008 (47919044)
80655000 8065d000 msisadrv msisadrv.sys Sat Jan 19 07:32:51 2008 (47918B83)
8065d000 80684000 pci pci.sys Sat Jan 19 07:32:57 2008 (47918B89)
80684000 80693000 partmgr partmgr.sys Sat Jan 19 07:49:54 2008 (47918F82)
80693000 806a2000 volmgr volmgr.sys Sat Jan 19 07:49:51 2008 (47918F7F)
806a2000 806ec000 volmgrx volmgrx.sys Sat Jan 19 07:50:00 2008 (47918F88)
806ec000 806f3000 pciide pciide.sys Sat Jan 19 07:49:42 2008 (47918F76)
806f3000 80701000 PCIIDEX PCIIDEX.SYS Sat Jan 19 07:49:40 2008 (47918F74)
80701000 80711000 mountmgr mountmgr.sys Sat Jan 19 07:49:13 2008 (47918F59)
80711000 80719000 atapi atapi.sys Sat Jan 19 07:49:40 2008 (47918F74)
80719000 80737000 ataport ataport.SYS Sat Jan 19 07:49:40 2008 (47918F74)
80737000 80751000 nvstor32 nvstor32.sys Mon Mar 19 22:56:33 2007 (45FEF901)
80751000 80792000 storport storport.sys Sat Jan 19 07:49:49 2008 (47918F7D)
80792000 807c4000 fltmgr fltmgr.sys Sat Jan 19 07:28:10 2008 (47918A6A)
807c4000 807d4000 fileinfo fileinfo.sys Sat Jan 19 07:34:27 2008 (47918BE3)
807d4000 807dcb80 PxHelp20 PxHelp20.sys Fri Feb 02 23:23:57 2007 (45C3ABED)
81e1d000 821d6000 nt ntkrnlpa.exe Tue Dec 08 19:13:19 2009 (4B1E892F)
821d6000 82209000 hal halmacpi.dll Sat Jan 19 07:27:20 2008 (47918A38)
87203000 87274000 ksecdd ksecdd.sys Mon Jun 15 15:58:01 2009 (4A364559)
87274000 8737f000 ndis ndis.sys Sat Jan 19 07:55:51 2008 (479190E7)
8737f000 873aa000 msrpc msrpc.sys Sat Jan 19 07:48:15 2008 (47918F1F)
873aa000 873e4000 NETIO NETIO.SYS Sat Jan 19 07:56:19 2008 (47919103)
87400000 874e9000 tcpip tcpip.sys Tue Dec 08 19:43:44 2009 (4B1E9050)
874e9000 87504000 fwpkclnt fwpkclnt.sys Sat Jan 19 07:55:44 2008 (479190E0)
8751e000 8752e000 amdk8 amdk8.sys Sat Jan 19 07:27:20 2008 (47918A38)
8752e000 87541000 i8042prt i8042prt.sys Sat Jan 19 07:49:17 2008 (47918F5D)
87541000 8754b000 usbohci usbohci.sys Sat Jan 19 07:53:21 2008 (47919051)
8754b000 87589000 USBPORT USBPORT.SYS Sat Jan 19 07:53:23 2008 (47919053)
87589000 87598000 usbehci usbehci.sys Sat Jan 19 07:53:21 2008 (47919051)
87598000 875e4000 HSXHWBS2 HSXHWBS2.sys Thu May 08 23:05:16 2008 (48235CFC)
87600000 8760b000 kbdclass kbdclass.sys Sat Jan 19 07:49:14 2008 (47918F5A)
8760f000 8771e000 Ntfs Ntfs.sys Sat Jan 19 07:28:54 2008 (47918A96)
8771e000 87757000 volsnap volsnap.sys Sat Jan 19 07:50:10 2008 (47918F92)
87757000 8775f000 spldr spldr.sys Fri Jun 22 03:29:17 2007 (467B17DD)
8775f000 8776e000 mup mup.sys Sat Jan 19 07:28:20 2008 (47918A74)
8776e000 87795000 ecache ecache.sys Sat Jan 19 07:50:47 2008 (47918FB7)
87795000 877a6000 disk disk.sys Sat Jan 19 07:49:47 2008 (47918F7B)
877a6000 877c7000 CLASSPNP CLASSPNP.SYS Sat Jan 19 07:49:36 2008 (47918F70)
877c7000 877d0000 crcdisk crcdisk.sys Thu Nov 02 10:52:27 2006 (4549B1CB)
877e7000 877f2000 tunnel tunnel.sys Sat Jan 19 07:55:50 2008 (479190E6)
877f2000 877fb000 tunmp tunmp.sys Sat Jan 19 07:55:40 2008 (479190DC)
877fb000 877ffa80 PS2 PS2.sys Tue Dec 13 03:26:59 2005 (439E2363)
8ac09000 8ad0b000 HSX_DP HSX_DP.sys Thu May 08 23:03:14 2008 (48235C82)
8ad0b000 8adc0000 HSX_CNXT HSX_CNXT.sys Thu May 08 23:04:13 2008 (48235CBD)
8adc0000 8adcd000 modem modem.sys Sat Jan 19 07:57:16 2008 (4791913C)
8adcd000 8addc200 ohci1394 ohci1394.sys Sat Jan 19 07:53:33 2008 (4791905D)
8addd000 8adea080 1394BUS 1394BUS.SYS Sat Jan 19 07:53:27 2008 (47919057)
8adeb000 8adfd000 HDAudBus HDAudBus.sys Wed Nov 28 01:18:41 2007 (474CA5D1)
8b00b000 8b10d680 nvmfdx32 nvmfdx32.sys Fri May 04 03:41:02 2007 (463A811E)
8b10e000 8b116280 cdrbsdrv cdrbsdrv.SYS Mon Feb 20 12:17:38 2006 (43F99742)
8b117000 8b12f000 cdrom cdrom.sys Sat Jan 19 07:49:50 2008 (47918F7E)
8b12f000 8b131700 GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 22:15:38 2008 (47FBC45A)
8b132000 8b160000 msiscsi msiscsi.sys Sat Jan 19 07:50:44 2008 (47918FB4)
8b160000 8b194000 usbhub usbhub.sys Sat Jan 19 07:53:40 2008 (47919064)
8b194000 8b1c6000 netbt netbt.sys Sat Jan 19 07:55:33 2008 (479190D5)
8b1c6000 8b1dc000 pacer pacer.sys Sat Apr 05 04:21:42 2008 (47F6D426)
8b1dc000 8b1ea000 netbios netbios.sys Sat Jan 19 07:55:45 2008 (479190E1)
8b1ea000 8b1fd000 wanarp wanarp.sys Sat Jan 19 07:56:31 2008 (4791910F)
8b209000 8b940dc0 nvlddmkm nvlddmkm.sys Sat Jul 07 00:05:06 2007 (468EAE82)
8b941000 8b9e0000 dxgkrnl dxgkrnl.sys Sat Aug 02 04:01:19 2008 (4893B1DF)
8b9e0000 8b9ed000 watchdog watchdog.sys Sat Jan 19 07:35:29 2008 (47918C21)
8b9ed000 8b9f8000 TDI TDI.SYS Sat Jan 19 07:57:10 2008 (47919136)
8ba09000 8ba0f380 HIDPARSE HIDPARSE.SYS Sat Jan 19 07:53:16 2008 (4791904C)
8ba10000 8ba1c000 vga vga.sys Sat Jan 19 07:52:06 2008 (47919006)
8ba1c000 8ba3d000 VIDEOPRT VIDEOPRT.SYS Sat Jan 19 07:52:10 2008 (4791900A)
8ba3d000 8ba45000 RDPCDD RDPCDD.sys Sat Jan 19 08:01:08 2008 (47919224)
8ba45000 8ba4d000 rdpencdd rdpencdd.sys Sat Jan 19 08:01:09 2008 (47919225)
8ba4d000 8ba58000 Msfs Msfs.SYS unavailable (00000000)
8ba58000 8ba66000 Npfs Npfs.SYS Sat Jan 19 07:28:09 2008 (47918A69)
8ba66000 8ba6f000 rasacd rasacd.sys Sat Jan 19 07:56:31 2008 (4791910F)
8ba6f000 8ba85000 tdx tdx.sys Sat Jan 19 07:55:58 2008 (479190EE)
8ba85000 8ba99000 smb smb.sys Sat Jan 19 07:55:27 2008 (479190CF)
8ba99000 8bae1000 afd afd.sys Sat Jan 19 07:57:00 2008 (4791912C)
8bae1000 8baea000 hidusb hidusb.sys Sat Jan 19 07:53:17 2008 (4791904D)
8baea000 8bafa000 HIDCLASS HIDCLASS.SYS Sat Jan 19 07:53:16 2008 (4791904C)
8bafa000 8bb02000 mouhid mouhid.sys Sat Jan 19 07:49:16 2008 (47918F5C)
8bb02000 8bb0b000 ws2ifsl ws2ifsl.sys Sat Jan 19 07:56:49 2008 (47919121)
8bb0b000 8bb1d000 USBSTOR USBSTOR.SYS Sat Jan 19 07:53:22 2008 (47919052)
8bb24000 8bb27000 BdaSup BdaSup.SYS Sat Jan 19 07:53:30 2008 (4791905A)
8bb27000 8bb3e000 rasl2tp rasl2tp.sys Sat Jan 19 07:56:33 2008 (47919111)
8bb3e000 8bb49000 ndistapi ndistapi.sys Sat Jan 19 07:56:24 2008 (47919108)
8bb49000 8bb6c000 ndiswan ndiswan.sys Sat Jan 19 07:56:32 2008 (47919110)
8bb6c000 8bb7b000 raspppoe raspppoe.sys Sat Jan 19 07:56:33 2008 (47919111)
8bb7b000 8bb8f000 raspptp raspptp.sys Sat Jan 19 07:56:34 2008 (47919112)
8bb8f000 8bba4000 rassstp rassstp.sys Sat Jan 19 07:56:43 2008 (4791911B)
8bba4000 8bbb4000 termdd termdd.sys Sat Jan 19 08:01:06 2008 (47919222)
8bbb4000 8bbbf000 mouclass mouclass.sys Sat Jan 19 07:49:14 2008 (47918F5A)
8bbbf000 8bbc0380 swenum swenum.sys Sat Jan 19 07:49:20 2008 (47918F60)
8bbc1000 8bbcb000 mssmbios mssmbios.sys Sat Jan 19 07:32:55 2008 (47918B87)
8bbcb000 8bbd8000 umbus umbus.sys Sat Jan 19 07:53:40 2008 (47919064)
8bbd8000 8bbfd000 drmk drmk.sys Sat Jan 19 08:53:02 2008 (47919E4E)
8be00000 8be07000 Beep Beep.SYS Sat Jan 19 07:49:10 2008 (47918F56)
8be07000 8be08700 USBD USBD.SYS Sat Jan 19 07:53:17 2008 (4791904D)
8be09000 8bfb1a00 RTKVHDA RTKVHDA.sys Thu Mar 01 10:20:58 2007 (45E68CEA)
8bfb2000 8bfdf000 portcls portcls.sys Sat Jan 19 07:53:17 2008 (4791904D)
8bfdf000 8bff0000 NDProxy NDProxy.SYS Sat Jan 19 07:56:28 2008 (4791910C)
8bff0000 8bff9000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
8bff9000 8c000000 Null Null.SYS unavailable (00000000)
8c000000 8c03c000 rdbss rdbss.sys Sat Jan 19 07:28:34 2008 (47918A82)
8c03c000 8c046000 nsiproxy nsiproxy.sys Sat Jan 19 07:55:50 2008 (479190E6)
8c046000 8c05d000 dfsc dfsc.sys Sat Jan 19 07:28:20 2008 (47918A74)
8c05d000 8c073000 cdfs cdfs.sys Sat Jan 19 07:28:02 2008 (47918A62)
8c073000 8c080000 crashdmp crashdmp.sys Sat Jan 19 07:49:43 2008 (47918F77)
8c080000 8c08a000 dump_diskdump dump_diskdump.sys Sat Jan 19 07:49:43 2008 (47918F77)
8c08a000 8c0a4000 dump_nvstor32 dump_nvstor32.sys Mon Mar 19 22:56:33 2007 (45FEF901)
8c0a4000 8c0ae000 Dxapi Dxapi.sys Sat Jan 19 07:36:12 2008 (47918C4C)
8c0ae000 8c0bd000 monitor monitor.sys Sat Jan 19 07:52:19 2008 (47919013)
8c0bd000 8c0d8000 luafv luafv.sys Sat Jan 19 07:30:35 2008 (47918AFB)
8c0e0000 8c0f0000 lltdio lltdio.sys Sat Jan 19 07:55:03 2008 (479190B7)
8c0f0000 8c103000 rspndr rspndr.sys Sat Jan 19 07:55:03 2008 (479190B7)
8c103000 8c1b2000 spsys spsys.sys Fri Jun 22 03:33:02 2007 (467B18BE)
93e90000 94092000 win32k win32k.sys unavailable (00000000)
940b0000 940b9000 TSDDD TSDDD.dll unavailable (00000000)
940d0000 940de000 cdd cdd.dll unavailable (00000000)
99202000 9926f000 HTTP HTTP.sys Sat Feb 20 23:18:38 2010 (4B8051AE)
9926f000 9928c000 srvnet srvnet.sys Fri Dec 11 14:07:10 2009 (4B2235EE)
9928c000 992a5000 bowser bowser.sys Sat Jan 19 07:28:26 2008 (47918A7A)
992a5000 992ba000 mpsdrv mpsdrv.sys Sat Jan 19 07:54:45 2008 (479190A5)
992ba000 992da000 mrxdav mrxdav.sys Sat Jan 19 07:28:44 2008 (47918A8C)
992da000 992f9000 mrxsmb mrxsmb.sys Fri Dec 04 18:12:50 2009 (4B193502)
992f9000 99332000 mrxsmb10 mrxsmb10.sys Fri Dec 04 18:12:57 2009 (4B193509)
99332000 9934a000 mrxsmb20 mrxsmb20.sys Sat Jan 19 07:28:35 2008 (47918A83)
9934a000 99371000 srv2 srv2.sys Mon Sep 14 12:44:55 2009 (4AAE1097)
99371000 993bf000 srv srv.sys Fri Dec 11 14:07:28 2009 (4B223600)
993bf000 993c0cc0 MCSTRM MCSTRM.SYS Wed Dec 17 00:24:32 2003 (3FDF8620)
993c1000 993c4180 mdmxsdk mdmxsdk.sys Tue Jun 20 00:26:59 2006 (449716A3)
9c80e000 9c8ec000 peauth peauth.sys Mon Oct 23 11:55:32 2006 (453C8384)
9c8ec000 9c8f6000 secdrv secdrv.SYS Wed Sep 13 16:18:32 2006 (45080528)
9c8f6000 9c902000 tcpipreg tcpipreg.sys Sat Jan 19 07:56:07 2008 (479190F7)
9c902000 9c90a000 xaudio xaudio.sys Fri Oct 19 01:36:53 2007 (4717E005)
9c90a000 9c91e580 WUDFRd WUDFRd.sys Sat Jan 19 07:53:04 2008 (47919040)
9c91f000 9c931000 WUDFPf WUDFPf.sys Sat Jan 19 07:52:49 2008 (47919031)
Unloaded modules:
9c9e5000 9c9ef000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c931000 9c94b000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
9c9c1000 9c9cb000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c9cb000 9c9e5000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
9c99d000 9c9a7000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c9a7000 9c9c1000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
9c979000 9c983000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c983000 9c99d000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
9c955000 9c95f000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c95f000 9c979000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
9c931000 9c93b000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
9c93b000 9c955000 hiber_nvstor
Timestamp: unavailable (00000000)
Checksum: 00000000
8c0d8000 8c0e0000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
877d0000 877dd000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
877dd000 877e7000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
87504000 8751e000 dump_nvstor3
Timestamp: unavailable (00000000)
Checksum: 00000000
8ba00000 8ba09000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8ba0f000 8bb24000 Ph3xIB32.sys
Timestamp: unavailable (00000000)
Checksum: 00000000