PAGE_FAULT_IN_NONPAGED_AREA 错误

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 90909090, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 805d060a, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS:  90909090

FAULTING_IP:
nt!RtlUnicodeToMultiByteSize+1e
805d060a 0fb70a          movzx   ecx,word ptr [edx]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  3

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  taskmgr.exe

LAST_CONTROL_TRANSFER:  from 805d8dae to 805d060a

STACK_TEXT:  
f76a3ac0 805d8dae f76a3adc 90909090 0000c25d nt!RtlUnicodeToMultiByteSize+0x1e
f76a3ad4 805d9648 7c80f913 f76a3d64 f9cd5370 nt!RtlxUnicodeStringToOemSize+0x18
f76a3aec f9cd62e7 f76a3bdc 7c80f913 00000001 nt!RtlUnicodeStringToAnsiString+0x1e
f76a3c00 f9cd53af 00000000 7c80f913 8173bc00 T_ProcMon!GetFullName+0x2d7 [e:\newsysmon\driver\t-procmon.c @ 1209]
f76a3d48 8053e638 00000090 00000000 0007f1ac T_ProcMon!HookRegOpenKey+0x3f [e:\newsysmon\driver\t-procmon.c @ 609]
f76a3d48 7c92e4f4 00000090 00000000 0007f1ac nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007f1c8 00000000 00000000 00000000 00000000 0x7c92e4f4


STACK_COMMAND:  kb

FOLLOWUP_IP:
T_ProcMon!GetFullName+2d7 [e:\newsysmon\driver\t-procmon.c @ 1209]
f9cd62e7 ??              ???

FAULTING_SOURCE_CODE:  
  1205:     try {
  1206:
  1207:         if( lpszSubKeyVal ) {
  1208:             keyname.Buffer = NULL;
> 1209:             if( NT_SUCCESS( RtlUnicodeStringToAnsiString( &keyname, lpszSubKeyVal, TRUE ))) {
  1210:
  1211:                 if( keyname.Buffer[0] ) {
  1212:
  1213:                     //
  1214:                     // See if this is an absolute rather than relative path, which


SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  T_ProcMon!GetFullName+2d7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: T_ProcMon

IMAGE_NAME:  T-ProcMon.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bf136b1

FAILURE_BUCKET_ID:  0x50_T_ProcMon!GetFullName+2d7

BUCKET_ID:  0x50_T_ProcMon!GetFullName+2d7

Followup: MachineOwner
---------

Hook NtOpenKey时出现非分页内存出错，这个要怎么处理？？哪位高手指点下！！