Donna,
GPFs are a challenge to debug. The address is not going to get you very far. If your code stops on RunUserInterface, most likely the crash is cause at a callback. From my experience the fastest way of find where the GPF gets generated is to add a DebugPrintf(,,,) statement and the beginnig and end of each callback indicating the current function. This way you'll know what is the conflicting function.
Please give this a try and let me know how this goes.
Regads,
Juan Carlos
N.I.