IIS Hang
am 24.10.2007 16:45:02 von JoeNakanishiWe've been having periodic IIS Hangs. Don't really have any experience
reviewing dumps. Any help would be appreciated.
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\joe\20071024-012441\Hang--4792_w3wp_PIMS.dmp]
User Mini Dump File with Full Memory: Only application data is available
Comment: 'Generated by IISDBG'
Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Version 3790 (Service Pack 2) MP (4 procs) Free x86
compatible
Product: Server, suite: TerminalServer SingleUserTS
Debug session time: Wed Oct 24 01:24:44.000 2007 (GMT-4)
System Uptime: 4 days 16:13:57.283
Process Uptime: 0 days 17:23:54.000
............................................................ ............................................................ .......................................
Loading unloaded module list
.................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(12b8.88c): Wake debugger - code 80000007 (first/second chance not available)
eax=c0c0c0c0 ebx=00000000 ecx=00000003 edx=0000000c esi=0000019c edi=00000000
eip=7c8285ec esp=0006fc0c ebp=0006fc7c iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
7c8285ec c3 ret
0:000> .sympath SRV*c:\localsymbols*http://msdl.microsoft.com/download/symbo ls
Symbol search path is:
SRV*c:\localsymbols*http://msdl.microsoft.com/download/symbo ls
0:000> !analyze -v
************************************************************ *******************
*
*
* Exception Analysis
*
*
*
************************************************************ *******************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
IISCHAgent.dll -
FAULTING_IP:
+0
00000000 ?? ???
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: 80000007 (Wake debugger)
ExceptionFlags: 00000000
NumberParameters: 0
BUGCHECK_STR: 80000007
PROCESS_NAME: w3wp.exe
ERROR_CODE: (NTSTATUS) 0x80000007 - {Kernel Debugger Awakened} the system
debugger was awakened by an interrupt.
NTGLOBALFLAG: 2000000
APPLICATION_VERIFIER_FLAGS: 0
DERIVED_WAIT_CHAIN:
Dl Eid Cid WaitType
-- --- ------- --------------------------
0 12b8.88c Event
WAIT_CHAIN_COMMAND: ~0s;k;;
BLOCKING_THREAD: 0000088c
DEFAULT_BUCKET_ID: APPLICATION_HANG_BlockedOn_EventHandle
PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_BlockedOn_EventHandle
LAST_CONTROL_TRANSFER: from 7c827d0b to 7c8285ec
FAULTING_THREAD: 0000088c
STACK_TEXT:
0006fc08 7c827d0b 77e61d1e 0000019c 00000000 ntdll!KiFastSystemCallRet
0006fc0c 77e61d1e 0000019c 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
0006fc7c 77e61c8d 0000019c ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
0006fc90 5a364662 0000019c ffffffff 00000000 kernel32!WaitForSingleObject+0x12
0006fca0 5a366e3f 00442f58 5a3af42d 00000000
w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
0006fca8 5a3af42d 00000000 64711dcf 00000000 w3dt!UlAtqStartListen+0x2d
0006fcb8 5a3bc335 01001418 010013e4 010012d0
w3core!W3_SERVER::StartListen+0xbd
0006ff0c 0100187c 00000005 003b4f18 00000000 w3core!UlW3Start+0x26e
0006ff44 01001a27 00000005 003b4f18 0040efa0 w3wp!wmain+0x22a
0006ffc0 77e6f23b 00000000 00000000 7ffde000 w3wp!wmainCRTStartup+0x12f
0006fff0 00000000 010018f8 00000000 78746341 kernel32!BaseProcessStart+0x23
FOLLOWUP_IP:
w3dt!WP_CONTEXT::RunMainThreadLoop+10
5a364662 837e1400 cmp dword ptr [esi+14h],0
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: w3dt!WP_CONTEXT::RunMainThreadLoop+10
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: w3dt
IMAGE_NAME: w3dt.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 45d70ac7
STACK_COMMAND: ~0s ; kb
FAILURE_BUCKET_ID: 80000007_w3dt!WP_CONTEXT::RunMainThreadLoop+10
BUCKET_ID: 80000007_w3dt!WP_CONTEXT::RunMainThreadLoop+10
Followup: MachineOwner
---------
0:000> ~*kb
.. 0 Id: 12b8.88c Suspend: 1 Teb: 7ffdd000 Unfrozen
ChildEBP RetAddr Args to Child
0006fc08 7c827d0b 77e61d1e 0000019c 00000000 ntdll!KiFastSystemCallRet
0006fc0c 77e61d1e 0000019c 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
0006fc7c 77e61c8d 0000019c ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
0006fc90 5a364662 0000019c ffffffff 00000000 kernel32!WaitForSingleObject+0x12
0006fca0 5a366e3f 00442f58 5a3af42d 00000000
w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
0006fca8 5a3af42d 00000000 64711dcf 00000000 w3dt!UlAtqStartListen+0x2d
0006fcb8 5a3bc335 01001418 010013e4 010012d0
w3core!W3_SERVER::StartListen+0xbd
0006ff0c 0100187c 00000005 003b4f18 00000000 w3core!UlW3Start+0x26e
0006ff44 01001a27 00000005 003b4f18 0040efa0 w3wp!wmain+0x22a
0006ffc0 77e6f23b 00000000 00000000 7ffde000 w3wp!wmainCRTStartup+0x12f
0006fff0 00000000 010018f8 00000000 78746341 kernel32!BaseProcessStart+0x23
1 Id: 12b8.1cfc Suspend: 1 Teb: 7ffdb000 Unfrozen
ChildEBP RetAddr Args to Child
031dff9c 7c826f4b 7c83d424 00000001 031dffb0 ntdll!KiFastSystemCallRet
031dffa0 7c83d424 00000001 031dffb0 00000000 ntdll!NtDelayExecution+0xc
031dffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpTimerThread+0x47
031dffec 00000000 7c83d3dd 00000000 00000000 kernel32!BaseThreadStart+0x34
2 Id: 12b8.165c Suspend: 1 Teb: 7ffda000 Unfrozen
ChildEBP RetAddr Args to Child
0321ff70 7c8277db 7c839f38 00000104 0321ffb0 ntdll!KiFastSystemCallRet
0321ff74 7c839f38 00000104 0321ffb0 0321ffb4 ntdll!ZwRemoveIoCompletion+0xc
0321ffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
0321ffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
3 Id: 12b8.1618 Suspend: 1 Teb: 7ffd7000 Unfrozen
ChildEBP RetAddr Args to Child
03d8ff24 7c8277db 77e5bea2 0000018c 03d8ff80 ntdll!KiFastSystemCallRet
03d8ff28 77e5bea2 0000018c 03d8ff80 03d8ff6c ntdll!ZwRemoveIoCompletion+0xc
03d8ff54 5a30248e 0000018c 03d8ff7c 03d8ff80
kernel32!GetQueuedCompletionStatus+0x29
03d8ff8c 5a3026ac 00000000 033f2fe8 5a300000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x33
03d8ffa0 5a301da9 033eef90 00000000 00000000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x24
03d8ffb8 77e64829 033f2fe8 00000000 00000000
w3tp!THREAD_MANAGER::ThreadManagerThread+0x39
03d8ffec 00000000 5a301d70 033f2fe8 00000000 kernel32!BaseThreadStart+0x34
4 Id: 12b8.16e4 Suspend: 1 Teb: 7ffd6000 Unfrozen
ChildEBP RetAddr Args to Child
03dcff24 7c8277db 77e5bea2 0000018c 03dcff80 ntdll!KiFastSystemCallRet
03dcff28 77e5bea2 0000018c 03dcff80 03dcff6c ntdll!ZwRemoveIoCompletion+0xc
03dcff54 5a30248e 0000018c 03dcff7c 03dcff80
kernel32!GetQueuedCompletionStatus+0x29
03dcff8c 5a3026ac 00000000 033f4fe8 5a300000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x33
03dcffa0 5a301da9 033eef90 00000000 00000000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x24
03dcffb8 77e64829 033f4fe8 00000000 00000000
w3tp!THREAD_MANAGER::ThreadManagerThread+0x39
03dcffec 00000000 5a301d70 033f4fe8 00000000 kernel32!BaseThreadStart+0x34
5 Id: 12b8.1660 Suspend: 1 Teb: 7ffd5000 Unfrozen
ChildEBP RetAddr Args to Child
03e0ff24 7c8277db 77e5bea2 0000018c 03e0ff80 ntdll!KiFastSystemCallRet
03e0ff28 77e5bea2 0000018c 03e0ff80 03e0ff6c ntdll!ZwRemoveIoCompletion+0xc
03e0ff54 5a30248e 0000018c 03e0ff7c 03e0ff80
kernel32!GetQueuedCompletionStatus+0x29
03e0ff8c 5a3026ac 00000000 033f8fe8 5a300000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x33
03e0ffa0 5a301da9 033eef90 00000000 00000000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x24
03e0ffb8 77e64829 033f8fe8 00000000 00000000
w3tp!THREAD_MANAGER::ThreadManagerThread+0x39
03e0ffec 00000000 5a301d70 033f8fe8 00000000 kernel32!BaseThreadStart+0x34
6 Id: 12b8.1580 Suspend: 1 Teb: 7ffd4000 Unfrozen
ChildEBP RetAddr Args to Child
03e4ff24 7c8277db 77e5bea2 0000018c 03e4ff80 ntdll!KiFastSystemCallRet
03e4ff28 77e5bea2 0000018c 03e4ff80 03e4ff6c ntdll!ZwRemoveIoCompletion+0xc
03e4ff54 5a30248e 0000018c 03e4ff7c 03e4ff80
kernel32!GetQueuedCompletionStatus+0x29
03e4ff8c 5a3026ac 00000000 033fcfe8 5a300000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x33
03e4ffa0 5a301da9 00000102 00000000 00000000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+0x24
03e4ffb8 77e64829 033fcfe8 00000000 00000000
w3tp!THREAD_MANAGER::ThreadManagerThread+0x39
03e4ffec 00000000 5a301d70 033fcfe8 00000000 kernel32!BaseThreadStart+0x34
7 Id: 12b8.1c84 Suspend: 1 Teb: 7ffaf000 Unfrozen
ChildEBP RetAddr Args to Child
0410fcec 7c827cfb 7c83c78e 00000017 0410fd34 ntdll!KiFastSystemCallRet
0410fcf0 7c83c78e 00000017 0410fd34 00000001
ntdll!NtWaitForMultipleObjects+0xc
0410ffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWaitThread+0x161
0410ffec 00000000 7c83c643 00000000 00000000 kernel32!BaseThreadStart+0x34
8 Id: 12b8.1f7c Suspend: 1 Teb: 7ffae000 Unfrozen
ChildEBP RetAddr Args to Child
0474fed8 7c8277db 77e5bea2 000001b8 0474ffac ntdll!KiFastSystemCallRet
0474fedc 77e5bea2 000001b8 0474ffac 0474ff20 ntdll!ZwRemoveIoCompletion+0xc
0474ff08 67306fab 000001b8 0474ff98 0474ffac
kernel32!GetQueuedCompletionStatus+0x29
WARNING: Stack unwind information not available. Following frames may be
wrong.
0474ffb8 77e64829 00000000 00000000 00000000
IISCHAgent!ConfigFileMonitor+0x15b
0474ffec 00000000 67306e50 00000000 00000000 kernel32!BaseThreadStart+0x34
9 Id: 12b8.1330 Suspend: 1 Teb: 7ffad000 Unfrozen
ChildEBP RetAddr Args to Child
0498febc 7c827cfb 77e6202c 00000002 0498ff0c ntdll!KiFastSystemCallRet
0498fec0 77e6202c 00000002 0498ff0c 00000001
ntdll!NtWaitForMultipleObjects+0xc
0498ff68 77e62fbe 00000002 0498ffa8 00000000
kernel32!WaitForMultipleObjectsEx+0x11a
0498ff84 6730649c 00000002 0498ffa8 00000000
kernel32!WaitForMultipleObjects+0x18
WARNING: Stack unwind information not available. Following frames may be
wrong.
0498ffb8 77e64829 00000000 00000000 00000000
IISCHAgent!MonitorWorkerProcess+0xa3
0498ffec 00000000 673063f9 00000000 00000000 kernel32!BaseThreadStart+0x34
10 Id: 12b8.1268 Suspend: 1 Teb: 7ffac000 Unfrozen
ChildEBP RetAddr Args to Child
07a5fa84 7c827d0b 77e61d1e 0000021c 00000000 ntdll!KiFastSystemCallRet
07a5fa88 77e61d1e 0000021c 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
07a5faf8 77e61c8d 0000021c ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
07a5fb0c 5a3b820f 0000021c ffffffff 00000000 kernel32!WaitForSingleObject+0x12
07a5ffb8 77e64829 00000000 00000000 00000000
w3core!HTTP_COMPRESSION::CompressionThread+0x126
07a5ffec 00000000 5a3b80e9 00000000 00000000 kernel32!BaseThreadStart+0x34
11 Id: 12b8.a0c Suspend: 1 Teb: 7ffa9000 Unfrozen
ChildEBP RetAddr Args to Child
0853fe50 7c826f4b 77e41ed1 00000000 0853fe94 ntdll!KiFastSystemCallRet
0853fe54 77e41ed1 00000000 0853fe94 00000000 ntdll!NtDelayExecution+0xc
0853febc 77e424ed 000001f4 00000000 0853ffb8 kernel32!SleepEx+0x68
0853fecc 791bc166 000001f4 d130c1be 000003a2 kernel32!Sleep+0xf
0853ffb8 77e64829 00000000 00000000 00000000
mscorsvr!ThreadpoolMgr::GateThreadStart+0x54
0853ffec 00000000 791bc112 00000000 00000000 kernel32!BaseThreadStart+0x34
12 Id: 12b8.1e38 Suspend: 1 Teb: 7ffa7000 Unfrozen
ChildEBP RetAddr Args to Child
088cfe70 7c827cfb 77e6202c 00000003 088cfec0 ntdll!KiFastSystemCallRet
088cfe74 77e6202c 00000003 088cfec0 00000001
ntdll!NtWaitForMultipleObjects+0xc
088cff1c 77e62fbe 00000003 088cff5c 00000000
kernel32!WaitForMultipleObjectsEx+0x11a
088cff38 7922fce6 00000003 088cff5c 00000000
kernel32!WaitForMultipleObjects+0x18
088cffa0 7922fc5d 00000000 00000000 00000000
mscorsvr!DebuggerRCThread::MainLoop+0x90
088cffb0 79232154 088cffec 77e64829 085caf80
mscorsvr!DebuggerRCThread::ThreadProc+0x68
088cffb8 77e64829 085caf80 00000000 00000000
mscorsvr!DebuggerRCThread::ThreadProcStatic+0xb
088cffec 00000000 79232149 085caf80 00000000 kernel32!BaseThreadStart+0x34
13 Id: 12b8.3f8 Suspend: 1 Teb: 7ffa6000 Unfrozen
ChildEBP RetAddr Args to Child
089bfefc 7c827d0b 77e61d1e 000002f4 00000000 ntdll!KiFastSystemCallRet
089bff00 77e61d1e 000002f4 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
089bff70 77e61c8d 000002f4 ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
089bff84 7920369d 000002f4 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
089bffac 79227e06 00000000 089bffec 77e64829
mscorsvr!gc_heap::gc_thread_function+0x2f
089bffb8 77e64829 046d9c58 00000000 00000000
mscorsvr!gc_heap::gc_thread_stub+0x1e
089bffec 00000000 79227de8 046d9c58 00000000 kernel32!BaseThreadStart+0x34
14 Id: 12b8.2d0 Suspend: 1 Teb: 7ffa5000 Unfrozen
ChildEBP RetAddr Args to Child
089ffdfc 7c827d0b 77e61d1e 000002f4 00000000 ntdll!KiFastSystemCallRet
089ffe00 77e61d1e 000002f4 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
089ffe70 77e61c8d 000002f4 ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
089ffe84 7920369d 000002f4 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
089ffeac 79227e06 00000000 00000000 00000000
mscorsvr!gc_heap::gc_thread_function+0x2f
089fffb8 77e64829 07648c58 00000000 00000000
mscorsvr!gc_heap::gc_thread_stub+0x1e
089fffec 00000000 79227de8 07648c58 00000000 kernel32!BaseThreadStart+0x34
15 Id: 12b8.1bbc Suspend: 1 Teb: 7ffa4000 Unfrozen
ChildEBP RetAddr Args to Child
08a3fcfc 7c827d0b 77e61d1e 000002f4 00000000 ntdll!KiFastSystemCallRet
08a3fd00 77e61d1e 000002f4 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
08a3fd70 77e61c8d 000002f4 ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
08a3fd84 7920369d 000002f4 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
08a3fdac 79227e06 00000000 00000038 00000023
mscorsvr!gc_heap::gc_thread_function+0x2f
08a3ffb8 77e64829 04622c58 00000000 00000000
mscorsvr!gc_heap::gc_thread_stub+0x1e
08a3ffec 00000000 79227de8 04622c58 00000000 kernel32!BaseThreadStart+0x34
16 Id: 12b8.29c Suspend: 1 Teb: 7ffa3000 Unfrozen
ChildEBP RetAddr Args to Child
08a7fbfc 7c827d0b 77e61d1e 000002f4 00000000 ntdll!KiFastSystemCallRet
08a7fc00 77e61d1e 000002f4 00000000 00000000 ntdll!NtWaitForSingleObject+0xc
08a7fc70 77e61c8d 000002f4 ffffffff 00000000
kernel32!WaitForSingleObjectEx+0xac
08a7fc84 7920369d 000002f4 ffffffff 00000000 kernel32!WaitForSingleObject+0x12
08a7fcac 79227e06 ffffffff 7c82edec 7c827c3b
mscorsvr!gc_heap::gc_thread_function+0x2f
08a7ffb8 77e64829 0882dc58 00000000 00000000
mscorsvr!gc_heap::gc_thread_stub+0x1e
08a7ffec 00000000 79227de8 0882dc58 00000000 kernel32!BaseThreadStart+0x34
17 Id: 12b8.278 Suspend: 1 Teb: 7ffa2000 Unfrozen
ChildEBP RetAddr Args to Child
1cc8fdf8 7c827cfb 77e6202c 00000002 1cc8fe48 ntdll!KiFastSystemCallRet
1cc8fdfc 77e6202c 00000002 1cc8fe48 00000001
ntdll!NtWaitForMultipleObjects+0xc
1cc8fea4 77e62fbe 00000002 793effc8 00000000
kernel32!WaitForMultipleObjectsEx+0x11a
1cc8fec0 7926ed87 00000002 793effc8 00000000
kernel32!WaitForMultipleObjects+0x18
1cc8fee0 792034b2 0000031c 00000000 7922ec48
mscorsvr!WaitForFinalizerEvent+0x5a
1cc8ff24 7922ec3f 00000000 8093bd91 7ffa2000
mscorsvr!GCHeap::FinalizerThreadStart+0x96
1cc8ffb8 77e64829 08839ff8 00000000 00000000
mscorsvr!Thread::intermediateThreadProc+0x44
1cc8ffec 00000000 7922ebfe 08839ff8 00000000 kernel32!BaseThreadStart+0x34
18 Id: 12b8.195c Suspend: 1 Teb: 7ffa1000 Unfrozen
ChildEBP RetAddr Args to Child
1e24ff40 7c826f4b 77e41ed1 00000001 1e24ff84 ntdll!KiFastSystemCallRet
1e24ff44 77e41ed1 00000001 1e24ff84 00000000 ntdll!NtDelayExecution+0xc
1e24ffac 791cfb1a 000003e8 00000001 77e64829 kernel32!SleepEx+0x68
1e24ffb8 77e64829 00000000 00000000 00000000
mscorsvr!ThreadpoolMgr::TimerThreadStart+0x23
1e24ffec 00000000 791cfaf7 00000000 00000000 kernel32!BaseThreadStart+0x34
19 Id: 12b8.36c Suspend: 1 Teb: 7ff5c000 Unfrozen
ChildEBP RetAddr Args to Child
27fefe48 7c827cfb 77e6202c 00000002 27fefe98 ntdll!KiFastSystemCallRet
27fefe4c 77e6202c 00000002 27fefe98 00000001
ntdll!NtWaitForMultipleObjects+0xc
27fefef4 7739bbd1 00000002 27feff1c 00000000
kernel32!WaitForMultipleObjectsEx+0x11a
27feff50 7739ce36 00000001 27feffb0 ffffffff
user32!RealMsgWaitForMultipleObjectsEx+0x141
27feff6c 4dd668ab 00000001 27feffb0 00000000
user32!MsgWaitForMultipleObjects+0x1f
27feffb8 77e64829 00000000 00000000 00000000 GdiPlus!BackgroundThreadProc+0x59
27feffec 00000000 4dd69605 00000000 00000000 kernel32!BaseThreadStart+0x34
20 Id: 12b8.bcc Suspend: 1 Teb: 7ff57000 Unfrozen
ChildEBP RetAddr Args to Child
287cf278 7c827d0b 77e61d1e 00000284 00000000 ntdll!KiFastSystemCallRet
287cf27c 77e61d1e 00000284 00000000 287cf2c0 ntdll!NtWaitForSingleObject+0xc
287cf2ec 77e61c8d 00000284 00009c40 00000000
kernel32!WaitForSingleObjectEx+0xac
287cf300 791d6134 00000284 00009c40 00000000 kernel32!WaitForSingleObject+0x12
287cf324 791fe95c 00000000 7c82d52f 287cf370
mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
287cffb8 77e64829 279e4ff8 00000000 00000000
mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
287cffec 00000000 791fe91b 279e4ff8 00000000 kernel32!BaseThreadStart+0x34
21 Id: 12b8.1b4 Suspend: 1 Teb: 7ffd8000 Unfrozen
ChildEBP RetAddr Args to Child
204eff24 7c826f4b 77e41ed1 00000001 204eff68 ntdll!KiFastSystemCallRet
204eff28 77e41ed1 00000001 204eff68 00000000 ntdll!NtDelayExecution+0xc
204eff90 79248c93 ffffffff 00000001 00000000 kernel32!SleepEx+0x68
204effb8 77e64829 00000000 00000000 00000000
mscorsvr!ThreadpoolMgr::WaitThreadStart+0x45
204effec 00000000 79248c71 023ffcf0 00000000 kernel32!BaseThreadStart+0x34
22 Id: 12b8.754 Suspend: 1 Teb: 7ffaa000 Unfrozen
ChildEBP RetAddr Args to Child
26d9fec0 7c827cfb 77e6202c 00000003 26d9ff10 ntdll!KiFastSystemCallRet
26d9fec4 77e6202c 00000003 26d9ff10 00000001
ntdll!NtWaitForMultipleObjects+0xc
26d9ff6c 77e62fbe 00000003 769cd34c 00000000
kernel32!WaitForMultipleObjectsEx+0x11a
26d9ff88 76929e35 00000003 769cd34c 00000000
kernel32!WaitForMultipleObjects+0x18
26d9ffb8 77e64829 00000000 00000000 00000000 userenv!NotificationThread+0x5f
26d9ffec 00000000 76929dd9 00000000 00000000 kernel32!BaseThreadStart+0x34
23 Id: 12b8.1a3c Suspend: 1 Teb: 7ffab000 Unfrozen
ChildEBP RetAddr Args to Child
2c4fff0c 7739c811 7739c844 2c4fff50 00000000 ntdll!KiFastSystemCallRet
2c4fff2c 7768ffb3 2c4fff50 00000000 00000000 user32!NtUserGetMessage+0xc
2c4fff6c 7768f366 00007530 77e61c96 1f448fe8
ole32!CDllHost::STAWorkerLoop+0x72
2c4fff88 7768f2a2 2c4fffac 776bbab4 77792c30 ole32!CDllHost::WorkerThread+0xc8
2c4fff90 776bbab4 77792c30 00000000 1f448fe8 ole32!DLLHostThreadEntry+0xd
2c4fffac 776b1704 00000000 2c4fffec 77e64829 ole32!CRpcThread::WorkerLoop+0x26
2c4fffb8 77e64829 1f448fe8 00000000 00000000
ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x20
2c4fffec 00000000 776b16e4 1f448fe8 00000000 kernel32!BaseThreadStart+0x34
24 Id: 12b8.1db8 Suspend: 1 Teb: 7ffdc000 Unfrozen
ChildEBP RetAddr Args to Child
2c2ff5c0 7c8277db 77e5bea2 0000028c 2c2ff61c ntdll!KiFastSystemCallRet
2c2ff5c4 77e5bea2 0000028c 2c2ff61c 2c2ff608 ntdll!ZwRemoveIoCompletion+0xc
2c2ff5f0 791fe9b2 0000028c 2c2ff618 2c2ff61c
kernel32!GetQueuedCompletionStatus+0x29
2c2ff624 791fe95c 00000000 2bcc0000 2bcc0000
mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49
2c2fffb8 77e64829 2a60aff8 00000000 00000000
mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
2c2fffec 00000000 791fe91b 2a60aff8 00000000 kernel32!BaseThreadStart+0x34
25 Id: 12b8.1908 Suspend: 1 Teb: 7ff55000 Unfrozen
ChildEBP RetAddr Args to Child
3574fad4 7c827d0b 71b21af5 00000874 00000001 ntdll!KiFastSystemCallRet
3574fad8 71b21af5 00000874 00000001 3574fb00 ntdll!NtWaitForSingleObject+0xc
3574fb14 71b21a03 00000874 00000878 00000000
mswsock!SockWaitForSingleObject+0x19d
3574fc04 71c0283c 00000001 3574fe84 3574fc7c mswsock!WSPSelect+0x380
3574fc54 77226314 00000001 3574fe84 3574fc7c ws2_32!select+0xb9
3574ffb0 77238db4 3574ffec 77e64829 2ac90fc8
wininet!ICAsyncThread::SelectThread+0x22a
3574ffb8 77e64829 2ac90fc8 00000000 00000000
wininet!ICAsyncThread::SelectThreadWrapper+0xd
3574ffec 00000000 77238da7 2ac90fc8 00000000 kernel32!BaseThreadStart+0x34
26 Id: 12b8.1ce8 Suspend: 1 Teb: 7ff5e000 Unfrozen
ChildEBP RetAddr Args to Child
2d57f8f4 7c827d0b 77e61d1e 00000288 00000000 ntdll!KiFastSystemCallRet
2d57f8f8 77e61d1e 00000288 00000000 2d57f93c ntdll!NtWaitForSingleObject+0xc
2d57f968 77e61c8d 00000288 00001388 00000000
kernel32!WaitForSingleObjectEx+0xac
2d57f97c 792740cf 00000288 00001388 00000000 kernel32!WaitForSingleObject+0x12
2d57f9a4 791fe95c 00000000 6365446c 5065646f
mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x127
2d57ffb8 77e64829 33e96ff8 00000000 00000000
mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
2d57ffec 00000000 791fe91b 33e96ff8 00000000 kernel32!BaseThreadStart+0x34
27 Id: 12b8.1e64 Suspend: 1 Teb: 7ff53000 Unfrozen
ChildEBP RetAddr Args to Child
359dff88 7c827cfb 71c51108 00000002 359dffb0 ntdll!KiFastSystemCallRet
359dff8c 71c51108 00000002 359dffb0 00000001
ntdll!NtWaitForMultipleObjects+0xc
359dffb8 77e64829 00000000 00000000 00000000 netapi32!NetbiosWaiter+0x73
359dffec 00000000 71c51095 00000000 00000000 kernel32!BaseThreadStart+0x34
28 Id: 12b8.dec Suspend: 1 Teb: 7ffa8000 Unfrozen
ChildEBP RetAddr Args to Child
0890fe18 7c82783b 77c885ac 00000154 0890ff74 ntdll!KiFastSystemCallRet
0890fe1c 77c885ac 00000154 0890ff74 00000000
ntdll!NtReplyWaitReceivePortEx+0xc
0890ff84 77c88792 0890ffac 77c8872d 03286f50
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
0890ff8c 77c8872d 03286f50 00000000 00000000 rpcrt4!RecvLotsaCallsWrapper+0xd
0890ffac 77c7b110 02322ec0 0890ffec 77e64829
rpcrt4!BaseCachedThreadRoutine+0x9d
0890ffb8 77e64829 3eb96f68 00000000 00000000 rpcrt4!ThreadStartRoutine+0x1b
0890ffec 00000000 77c7b0f5 3eb96f68 00000000 kernel32!BaseThreadStart+0x34
29 Id: 12b8.ddc Suspend: 1 Teb: 7ff5d000 Unfrozen
ChildEBP RetAddr Args to Child
1ed4ff70 7c8277db 7c839f38 00000104 1ed4ffb0 ntdll!KiFastSystemCallRet
1ed4ff74 7c839f38 00000104 1ed4ffb0 1ed4ffb4 ntdll!ZwRemoveIoCompletion+0xc
1ed4ffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
1ed4ffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
30 Id: 12b8.185c Suspend: 1 Teb: 7ff5b000 Unfrozen
ChildEBP RetAddr Args to Child
26defcf8 7c827d0b 77e61d1e 00000284 00000000 ntdll!KiFastSystemCallRet
26defcfc 77e61d1e 00000284 00000000 26defd40 ntdll!NtWaitForSingleObject+0xc
26defd6c 77e61c8d 00000284 00009c40 00000000
kernel32!WaitForSingleObjectEx+0xac
26defd80 791d6134 00000284 00009c40 00000000 kernel32!WaitForSingleObject+0x12
26defda4 791fe95c 00000000 8083d5c7 00000000
mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
26deffb8 77e64829 46cc3ff8 00000000 00000000
mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
26deffec 00000000 791fe91b 46cc3ff8 00000000 kernel32!BaseThreadStart+0x34
31 Id: 12b8.1dd0 Suspend: 1 Teb: 7ff4f000 Unfrozen
ChildEBP RetAddr Args to Child
3a0bff70 7c8277db 7c839f38 00000104 3a0bffb0 ntdll!KiFastSystemCallRet
3a0bff74 7c839f38 00000104 3a0bffb0 3a0bffb4 ntdll!ZwRemoveIoCompletion+0xc
3a0bffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
3a0bffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
32 Id: 12b8.10e4 Suspend: 1 Teb: 7ffd9000 Unfrozen
ChildEBP RetAddr Args to Child
07a9fbf8 7c827d0b 77e61d1e 00000284 00000000 ntdll!KiFastSystemCallRet
07a9fbfc 77e61d1e 00000284 00000000 07a9fc40 ntdll!NtWaitForSingleObject+0xc
07a9fc6c 77e61c8d 00000284 00009c40 00000000
kernel32!WaitForSingleObjectEx+0xac
07a9fc80 791d6134 00000284 00009c40 00000000 kernel32!WaitForSingleObject+0x12
07a9fca4 791fe95c 00000000 7c82ee58 ffffffff
mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
07a9ffb8 77e64829 4a3bfff8 00000000 00000000
mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
07a9ffec 00000000 791fe91b 4a3bfff8 00000000 kernel32!BaseThreadStart+0x34
33 Id: 12b8.984 Suspend: 1 Teb: 7ff5a000 Unfrozen
ChildEBP RetAddr Args to Child
26e2ff70 7c8277db 7c839f38 00000104 26e2ffb0 ntdll!KiFastSystemCallRet
26e2ff74 7c839f38 00000104 26e2ffb0 26e2ffb4 ntdll!ZwRemoveIoCompletion+0xc
26e2ffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
26e2ffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
34 Id: 12b8.1d74 Suspend: 1 Teb: 7ff59000 Unfrozen
ChildEBP RetAddr Args to Child
2c46ff70 7c8277db 7c839f38 00000104 2c46ffb0 ntdll!KiFastSystemCallRet
2c46ff74 7c839f38 00000104 2c46ffb0 2c46ffb4 ntdll!ZwRemoveIoCompletion+0xc
2c46ffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
2c46ffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
35 Id: 12b8.13cc Suspend: 1 Teb: 7ff58000 Unfrozen
ChildEBP RetAddr Args to Child
2d6bff70 7c8277db 7c839f38 00000104 2d6bffb0 ntdll!KiFastSystemCallRet
2d6bff74 7c839f38 00000104 2d6bffb0 2d6bffb4 ntdll!ZwRemoveIoCompletion+0xc
2d6bffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
2d6bffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34
36 Id: 12b8.1a04 Suspend: 1 Teb: 7ff56000 Unfrozen
ChildEBP RetAddr Args to Child
34adff70 7c8277db 7c839f38 00000104 34adffb0 ntdll!KiFastSystemCallRet
34adff74 7c839f38 00000104 34adffb0 34adffb4 ntdll!ZwRemoveIoCompletion+0xc
34adffb8 77e64829 00000000 00000000 00000000 ntdll!RtlpWorkerThread+0x3d
34adffec 00000000 7c839efb 00000000 00000000 kernel32!BaseThreadStart+0x34