
Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\123109-13150-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is: C:\Windows\System32
Windows 7 Kernel Version 7601 (Service Pack 1) MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e97670
Debug session time: Thu Aug  1 20:39:01.500 2013 (UTC + 2:00)
System Uptime: 0 days 11:41:23.537
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa81084b8d80, 2, 1, fffff80002cd4730}

Probably caused by : ntkrnlmp.exe ( nt!KiProcessExpiredTimerList+110 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa81084b8d80, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cd4730, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f01100
GetUlongFromAddress: unable to read from fffff80002f011c0
 fffffa81084b8d80 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KiProcessExpiredTimerList+110
fffff800`02cd4730 f00fba2f07      lock bts dword ptr [rdi],7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TAG_NOT_DEFINED_c000000f:  FFFFF880030D3FB0

TRAP_FRAME:  fffff880030cc450 -- (.trap 0xfffff880030cc450)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=29d3f43ecf330000
rdx=fffff880030a8700 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cd4730 rsp=fffff880030cc5e0 rbp=fffffa8009593420
 r8=fffffa800945bbf0  r9=0000000000000008 r10=fffff80002c54000
r11=fffff880030cc5b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
nt!KiProcessExpiredTimerList+0x110:
fffff800`02cd4730 f00fba2f07      lock bts dword ptr [rdi],7 ds:00000000`00000000=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc91a9 to fffff80002cc9c00

STACK_TEXT:  
fffff880`030cc308 fffff800`02cc91a9 : 00000000`0000000a fffffa81`084b8d80 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`030cc310 fffff800`02cc7e20 : 00000000`00000005 00000000`00000000 fffffa80`07060a70 fffffa80`09593420 : nt!KiBugCheckDispatch+0x69
fffff880`030cc450 fffff800`02cd4730 : fffffa80`00000018 fffffa80`0945bc58 fffffa80`0945bc58 fffffa80`088df770 : nt!KiPageFault+0x260
fffff880`030cc5e0 fffff800`02d51a2a : 00000061`fbbe2640 fffff880`030ccc58 00000000`00292989 fffff880`030a76a8 : nt!KiProcessExpiredTimerList+0x110
fffff880`030ccc30 fffff800`02cd42fc : 0000001a`b07891ff 0000001e`002929ac 0000001a`b078915b 00000000`00000089 : nt! ?? ::FNODOBFM::`string'+0x57d9f
fffff880`030cccd0 fffff800`02cc190a : fffff880`030a4180 fffff880`030af040 00000000`00000000 fffff800`02df5e20 : nt!KiRetireDpcList+0x1bc
fffff880`030ccd80 00000000`00000000 : fffff880`030cd000 fffff880`030c7000 fffff880`030ccd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiProcessExpiredTimerList+110
fffff800`02cd4730 f00fba2f07      lock bts dword ptr [rdi],7

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiProcessExpiredTimerList+110

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

FAILURE_BUCKET_ID:  X64_0xA_nt!KiProcessExpiredTimerList+110

BUCKET_ID:  X64_0xA_nt!KiProcessExpiredTimerList+110

Followup: MachineOwner
---------

