Symbol search path is: srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18741.x86fre.win7sp1_gdr.150202-1526
Machine Name:
Kernel base = 0x82604000 PsLoadedModuleList = 0x8274e5b0
Debug session time: Tue May  5 19:28:31.707 2015 (UTC + 2:00)
System Uptime: 0 days 0:00:51.373
Loading Kernel Symbols
...............................................................
................................................................
.........
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {fc200000, 0, 926ea36c, 2}


Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!itrp_IUP+173 )

Followup: MachineOwner
---------

kd> !analyze -v; .logclose; q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fc200000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 926ea36c, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from 8276e84c
Unable to read MiSystemVaType memory at 8274df00
 fc200000 

FAULTING_IP: 
win32k!itrp_IUP+173
926ea36c 840c10          test    byte ptr [eax+edx],cl

MM_INTERNAL_CODE:  2

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 926ebc79 to 926ea36c

STACK_TEXT:  
8ba813f8 926ebc79 fc1ff6e0 926ef088 fc1ff774 win32k!itrp_IUP+0x173
8ba81400 926ef088 fc1ff774 fc1ff73c fc1ffddc win32k!itrp_InnerExecute+0x38
8ba81480 926f3234 005f1348 005f135b fc1ff6e0 win32k!itrp_Execute+0x2b2
8ba814a8 926f29dc 005f1348 005f135b fc1ff6e0 win32k!itrp_ExecuteGlyphPgm+0x4a
8ba814dc 926f1e5e fc1fd570 00000001 00000000 win32k!fsg_SimpleInnerGridFit+0x102
8ba81574 926f238c fc1fd250 fc1feb24 fc1ff6e0 win32k!fsg_ExecuteGlyph+0x1ce
8ba815d0 926f2202 fc1fd250 fc1ff6e0 fc1fea9c win32k!fsg_CreateGlyphData+0xea
8ba81610 926ef419 fc1fd250 fc1ff6e0 fc1fd2c4 win32k!fsg_GridFit+0x4d
8ba81688 926f906c 00000001 8ba816a4 926f8fc3 win32k!fs__Contour+0x287
8ba81694 926f8fc3 fc1fd010 fc1fd07c 8ba816c0 win32k!fs_ContourGridFit+0x12
8ba816a4 926f991f fc1fd010 fc1fd07c 0000000b win32k!fs_NewContourGridFit+0x10
8ba816c0 926f9960 feccee78 0000000b 8ba816fc win32k!bGetGlyphOutline+0xd7
8ba816e8 926f9b59 feccee78 0000000b 00000001 win32k!bGetGlyphMetrics+0x20
8ba8182c 926eec63 feccee78 0000000b 8ba81918 win32k!lGetGlyphBitmap+0x2b
8ba81850 926eeab6 00000000 00000001 0000000b win32k!ttfdQueryFontData+0x158
8ba818a0 926edce2 ff7af010 fe340cf0 00000001 win32k!ttfdSemQueryFontData+0x45
8ba818e8 926f3774 ff7af010 fe340cf0 00000001 win32k!PDEVOBJ::QueryFontData+0x3e
8ba81960 9276bc8d 8ba81c3c fc4c0d64 fc1fb250 win32k!xInsertMetricsPlusRFONTOBJ+0x120
8ba81990 926e594d 00000008 ff7bf030 8ba81cd6 win32k!RFONTOBJ::bGetGlyphMetricsPlus+0x179
8ba819c8 9276b78b 8ba81c1c 8ba81c3c 00000008 win32k!ESTROBJ::vCharPos_H3+0xf0
8ba81a0c 926e55d0 8ba81cd0 00000008 8ba81c1c win32k!ESTROBJ::vInit+0x268
8ba81c2c 926e5793 00000000 8ba81cd0 fe340cf0 win32k!GreGetTextExtentExW+0x12a
8ba81d0c 82641896 0201033f 02b90bac 00000008 win32k!NtGdiGetTextExtentExW+0x141
8ba81d0c 770f70f4 0201033f 02b90bac 00000008 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f69c 00000000 00000000 00000000 00000000 0x770f70f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!itrp_IUP+173
926ea36c 840c10          test    byte ptr [eax+edx],cl

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!itrp_IUP+173

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  54ee8ecd

FAILURE_BUCKET_ID:  0x50_win32k!itrp_IUP+173

BUCKET_ID:  0x50_win32k!itrp_IUP+173

Followup: MachineOwner
---------
