BOSD 0x0000003B win32k.sys


Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\My Documents\Desktop\050212-30872-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*D:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`02063000 PsLoadedModuleList = 0xfffff800`022a7650
Debug session time: Wed May  2 09:21:06.361 2012 (UTC + 8:00)
System Uptime: 6 days 18:32:18.888
Loading Kernel Symbols
...............................................................
................................................................
......................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff960001bff92, fffff8800f6f5ff0, 0}

Probably caused by : win32k.sys ( win32k!xxxTrackPopupMenuEx+9ba )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960001bff92, Address of the instruction which caused the bugcheck
Arg3: fffff8800f6f5ff0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx

FAULTING_IP:
win32k!xxxTrackPopupMenuEx+9ba
fffff960`001bff92 410fba670808    bt      dword ptr [r15+8],8

CONTEXT:  fffff8800f6f5ff0 -- (.cxr 0xfffff8800f6f5ff0)
rax=0000000000000000 rbx=0000000000000001 rcx=fffff900c3127741
rdx=fffff900c3f26101 rsi=0000000000000182 rdi=fffff900c2dd8260
rip=fffff960001bff92 rsp=fffff8800f6f69d0 rbp=fffff900c081b6d0
 r8=fffff900c3f26100  r9=0000000000000080 r10=fffff90000000540
r11=fffff900c3127740 r12=fffff900c68cf5d0 r13=fffff900c097ef10
r14=fffff900c09a5b10 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
win32k!xxxTrackPopupMenuEx+0x9ba:
fffff960`001bff92 410fba670808    bt      dword ptr [r15+8],8 ds:002b:00000000`00000008=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff960001bff92

STACK_TEXT:
fffff880`0f6f69d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!xxxTrackPopupMenuEx+0x9ba


FOLLOWUP_IP:
win32k!xxxTrackPopupMenuEx+9ba
fffff960`001bff92 410fba670808    bt      dword ptr [r15+8],8

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!xxxTrackPopupMenuEx+9ba

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4f2b63bd

STACK_COMMAND:  .cxr 0xfffff8800f6f5ff0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba

BUCKET_ID:  X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba

Followup: MachineOwner
---------

0: kd> lmvm win32k
start             end                 module name
fffff960`00090000 fffff960`003a5000   win32k     (pdb symbols)          d:\symbols\win32k.pdb\35DCD16E200141D2951315F923361A822\win32k.pdb
    Loaded symbol image file: win32k.sys
    Mapped memory image file: d:\symbols\win32k.sys\4F2B63BD315000\win32k.sys
    Image path: \SystemRoot\System32\win32k.sys
    Image name: win32k.sys
    Timestamp:        Fri Feb 03 12:34:05 2012 (4F2B63BD)
    CheckSum:         00309DBE
    ImageSize:        00315000
    File version:     6.1.7601.17772
    Product version:  6.1.7601.17772
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     win32k.sys
    OriginalFilename: win32k.sys
    ProductVersion:   6.1.7601.17772
    FileVersion:      6.1.7601.17772 (win7sp1_gdr.120202-1527)
    FileDescription:  Multi-User Win32 Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> .cxr 0xfffff8800f6f5ff0
rax=0000000000000000 rbx=0000000000000001 rcx=fffff900c3127741
rdx=fffff900c3f26101 rsi=0000000000000182 rdi=fffff900c2dd8260
rip=fffff960001bff92 rsp=fffff8800f6f69d0 rbp=fffff900c081b6d0
 r8=fffff900c3f26100  r9=0000000000000080 r10=fffff90000000540
r11=fffff900c3127740 r12=fffff900c68cf5d0 r13=fffff900c097ef10
r14=fffff900c09a5b10 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
win32k!xxxTrackPopupMenuEx+0x9ba:
fffff960`001bff92 410fba670808    bt      dword ptr [r15+8],8 ds:002b:00000000`00000008=????????