Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\022311-22245-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 UP Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02a05000 PsLoadedModuleList = 0xfffff800`02c42e50
Debug session time: Wed Feb 23 00:03:37.457 2011 (GMT-5)
System Uptime: 0 days 0:15:50.236
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff960001ad43d, fffff88003241010, 0}
Probably caused by : win32k.sys ( win32k!StoreQMessageExtended+15 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960001ad43d, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88003241010, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!StoreQMessageExtended+15
fffff960`001ad43d 488b02 mov rax,qword ptr [rdx]
CONTEXT: fffff88003241010 -- (.cxr 0xfffff88003241010)
rax=0000000000000000 rbx=fffff900c31cf360 rcx=fffff900c31cf360
rdx=f7fff900c0619ae0 rsi=0000000000000010 rdi=fffff900c21408f0
rip=fffff960001ad43d rsp=fffff880032419e0 rbp=fffff88003241ca0
r8=0000000000000113 r9=0000000000000004 r10=f7fff900c0619ae0
r11=fffff900c31cf360 r12=0000000000000001 r13=fffff88003241bd8
r14=00000000000025ff r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!StoreQMessageExtended+0x15:
fffff960`001ad43d 488b02 mov rax,qword ptr [rdx] ds:002b:f7fff900`c0619ae0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: E_IATIGEA.EXE
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff9600019579c to fffff960001ad43d
STACK_TEXT:
fffff880`032419e0 fffff960`0019579c : fffff900`c2235a80 00000000`00000010 00000000`00000001 00000000`00000001 : win32k!StoreQMessageExtended+0x15
fffff880`03241a10 fffff960`00189d9c : fffff900`c21408f0 fffff880`03241ca0 00000000`00000001 fffffa80`0532b070 : win32k!DoTimer+0xa0
fffff880`03241a70 fffff960`00189fbd : 00000000`00000000 fffff800`000025ff 00000000`00000000 fffffa80`ffffffff : win32k!xxxRealInternalGetMessage+0x6c0
fffff880`03241b50 fffff960`0018b9b5 : 00000000`00000000 00000000`00000113 00000000`00000004 00000000`00000bb8 : win32k!xxxInternalGetMessage+0x35
fffff880`03241b90 fffff800`02a74993 : fffffa80`04d6d5b0 00000000`0025295c 00000000`00000020 00000000`00000020 : win32k!NtUserGetMessage+0x75
fffff880`03241c20 00000000`76f3c92a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0018f658 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f3c92a
FOLLOWUP_IP:
win32k!StoreQMessageExtended+15
fffff960`001ad43d 488b02 mov rax,qword ptr [rdx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!StoreQMessageExtended+15
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d23ecb0
STACK_COMMAND: .cxr 0xfffff88003241010 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!StoreQMessageExtended+15
BUCKET_ID: X64_0x3B_win32k!StoreQMessageExtended+15
Followup: MachineOwner
---------