Symbol search path is: srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18741.x86fre.win7sp1_gdr.150202-1526
Machine Name:
Kernel base = 0x82601000 PsLoadedModuleList = 0x8274b5b0
Debug session time: Sat May  9 00:23:52.035 2015 (UTC + 2:00)
System Uptime: 0 days 0:00:59.735
Loading Kernel Symbols
...............................................................
................................................................
..........
Loading User Symbols
Loading unloaded module list
....
Unable to load image ATMFD.DLL, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ATMFD.DLL
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {ac5b2ff7, 0, 91c55195, 2}


Could not read faulting driver name
Probably caused by : ATMFD.DLL ( ATMFD+35195 )

Followup: MachineOwner
---------

kd> !analyze -v; .logclose; q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ac5b2ff7, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 91c55195, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from 8276b84c
Unable to read MiSystemVaType memory at 8274af00
 ac5b2ff7 

FAULTING_IP: 
ATMFD+35195
91c55195 803802          cmp     byte ptr [eax],2

MM_INTERNAL_CODE:  2

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 91c5598d to 91c55195

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
9826f638 91c5598d 9826f890 01940000 9826f890 ATMFD+0x35195
9826f730 91c54ee4 9826f890 01940000 9826f74c ATMFD+0x3598d
9826f834 91c55044 9826f890 01940000 9826f968 ATMFD+0x34ee4
9826f868 91c2512a 00000000 9826f890 01940000 ATMFD+0x35044
9826f908 91c2718f 00000004 00000001 00000002 ATMFD+0x512a
9826f988 91c23c8e 00000000 00000000 97eb0d00 ATMFD+0x718f
9826fa6c 91d47a9a 00000004 fc7eafc0 fc718ff8 ATMFD+0x3c8e
9826fab4 91d479ec 00000001 fc7eafc0 fc718ff8 win32k!PDEVOBJ::LoadFontFile+0x3c
9826faf4 91d4742d ffa66130 00000019 fc7eafc0 win32k!vLoadFontFileView+0x291
9826fb80 91d3641f 9826fc58 00000019 00000001 win32k!PUBLIC_PFTOBJ::bLoadFonts+0x209
9826fbcc 91d37403 9826fc58 00000019 00000001 win32k!GreAddFontResourceWInternal+0xfb
9826fd14 8263e896 00283e88 00000019 00000001 win32k!NtGdiAddFontResourceW+0x142
9826fd14 76e370f4 00283e88 00000019 00000001 nt!KiSystemServicePostCall
0018f894 00000000 00000000 00000000 00000000 0x76e370f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ATMFD+35195
91c55195 803802          cmp     byte ptr [eax],2

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  ATMFD+35195

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ATMFD

IMAGE_NAME:  ATMFD.DLL

DEBUG_FLR_IMAGE_TIMESTAMP:  54e6a55a

FAILURE_BUCKET_ID:  0x50_ATMFD+35195

BUCKET_ID:  0x50_ATMFD+35195

Followup: MachineOwner
---------
