bff90ca3 8b08 mov ecx,dword ptr [eax] ds:0023:00000000=????????

You are the IT professional who work in an International company named Wiikigo. You are experienced in troubleshooting operating systems and applications that are not working correctly, identifying code defects and so on. You have enough knowledge on windows internals and you provide technical support for the company. You are in charge of a Windows XP client. This client crashes every week and displays a blue screen. The Stop code below is contained in the blue screen.

**STOP: 0X0000001F (0XC0000005, 0XBFF90CA3, 0X00000000, 0X00000000) KMODE_EXCEPTION_NOT_HANDLED

The !analyze command is run from WinDbg by you and you get the following output.

TRAP_FRAME: bdf80834 — (.trap ffffffffbdf80834)

ErrCode = 00000000

eax=00000000 ebx=bdf80c34 ecx=89031870 edx=88096928 esi=88096928 edi=8905e7f0

eip=bff90ca3 esp=bdf808a8 ebp=bdf80a44 iopl=0 nv up ei ng nz na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282

abc+0xfca3:

bff90ca3 8b08 mov ecx,dword ptr [eax] ds:0023:00000000=????????

Resetting default scope

STACK_TEXT:

bdf807c4 80467a15 bdf807e0 00000000 bdf80834 nt!KiDispatchException+0x30e

bdf8082c 804679c6 00000000 bdf80860 804d9f69 nt!CommonDispatchException+0x4d

bdf80838 804d9f69 00000000 00000005 e56c6946 nt!KiUnexpectedInterruptTail+0x207

00000000 00000000 00000000 00000000 00000000 nt!ObpAllocateObject+0xe1

You have to view the call stack which generated the exception. Of the following WinDbg commands, which one should be used?

You are the IT professional who work in an International company named Wiikigo. You are experienced in troubleshooting operating systems and applications that are not working correctly, identifying code defects and so on. You have enough knowledge on windows internals and you provide technical support for the company. You are in charge of a Windows XP client. This client crashes every week and displays a blue screen. The Stop code below is contained in the blue screen.

**STOP: 0X0000001F (0XC0000005, 0XBFF90CA3, 0X00000000, 0X00000000) KMODE_EXCEPTION_NOT_HANDLED

The !analyze command is run from WinDbg by you and you get the following output.

TRAP_FRAME: bdf80834 — (.trap ffffffffbdf80834)

ErrCode = 00000000

eax=00000000 ebx=bdf80c34 ecx=89031870 edx=88096928 esi=88096928 edi=8905e7f0

eip=bff90ca3 esp=bdf808a8 ebp=bdf80a44 iopl=0 nv up ei ng nz na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282

abc+0xfca3:

bff90ca3 8b08 mov ecx,dword ptr [eax] ds:0023:00000000=????????

Resetting default scope

STACK_TEXT:

bdf807c4 80467a15 bdf807e0 00000000 bdf80834 nt!KiDispatchException+0x30e

bdf8082c 804679c6 00000000 bdf80860 804d9f69 nt!CommonDispatchException+0x4d

bdf80838 804d9f69 00000000 00000005 e56c6946 nt!KiUnexpectedInterruptTail+0x207

00000000 00000000 00000000 00000000 00000000 nt!ObpAllocateObject+0xe1

You have to view the call stack which generated the exception. Of the following WinDbg commands, which one should be used?

A.
You should choose to use uf 80467a15

B.
You should choose to use u eip-100 eip+1

C.
You should choose to use .cxr ffffffffbdf80834

D.
You should choose to use.trap ffffffffbdf80834;kb



Leave a Reply 0

Your email address will not be published. Required fields are marked *