Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: win32k
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48025f2a
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam
FAULTING_IP:
win32k+15280b
bf95280b 8b4004 mov eax,dword ptr [eax+4]
TRAP_FRAME: 9a5ffc00 -- (.trap 0xffffffff9a5ffc00)
ErrCode = 00000000
eax=00000000 ebx=00000100 ecx=00000000 edx=00000000 esi=e1bee000 edi=e39aa428
eip=bf95280b esp=9a5ffc74 ebp=9a5ffc8c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k+0x15280b:
bf95280b 8b4004 mov eax,dword ptr [eax+4] ds
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
LAST_CONTROL_TRANSFER: from bf949e98 to bf95280b
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
9a5ffc8c bf949e98 e13a0008 e1bee200 e2f63500 win32k+0x15280b
9a5ffd28 bf949f14 080105b3 0012e3f0 00000100 win32k+0x149e98
9a5ffd48 8053d638 080105b3 0012e3f0 00000100 win32k+0x149f14
9a5ffd64 7c90e4f4 badb0d00 0012e0d4 9a105d98 nt+0x66638
9a5ffd68 badb0d00 0012e0d4 9a105d98 9a105dcc 0x7c90e4f4
9a5ffd6c 0012e0d4 9a105d98 9a105dcc 00000000 0xbadb0d00
9a5ffd70 9a105d98 9a105dcc 00000000 00000000 0x12e0d4
9a5ffd74 9a105dcc 00000000 00000000 00000000 0x9a105d98
9a5ffd78 00000000 00000000 00000000 00000000 0x9a105dcc
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k+15280b
bf95280b 8b4004 mov eax,dword ptr [eax+4]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k+15280b
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: win32k.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
kd> .trap 0xffffffff9a5ffc00
ErrCode = 00000000
eax=00000000 ebx=00000100 ecx=00000000 edx=00000000 esi=e1bee000 edi=e39aa428
eip=bf95280b esp=9a5ffc74 ebp=9a5ffc8c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k+0x15280b:
bf95280b 8b4004 mov eax,dword ptr [eax+4] ds
kd> lmvm win32k
start end module name
bf800000 bf9c2980 win32k T (no symbols)
Loaded symbol image file: win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Sun Apr 13 21:29:46 2008 (48025F2A)
CheckSum: 001C9D09
ImageSize: 001C2980
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4