MSFN Forum: browser hang (no response) after 3 screens viewed. - MSFN Forum

Jump to content



Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

browser hang (no response) after 3 screens viewed. Rate Topic: -----

#1 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 13 December 2006 - 04:08 PM

Hi,
I have Win 2K Prof Sp4 with all the latest patches. I have IE6sp1 with all the latest patches.
Connection speed T1. I have all the latest XmlCore v3.0, v4.0 and v6.0 install/patches that
IE may need.

Problem:
When I view about 2-4 web pages, the browser will just stop updating from page 4 onward.
The task manager says "No Response" in the applications window or the IE browser entry for this screen
just disappears from the task manager application window list. If I wait about 3-5 minutes, the
browser will start responding again. Then after about 2-4 web pages, the problem continues again.

Variation #1
If a web page pops a web page window, these popped windows will never finish updating and
will be blank until it times out saying it can't display the page. When windows are popped like this
it speeds up the original window to hang. It seems after about 2-4 window pops, everything
shows up as "no response" or disappears from the task manager application list.

Variation #2
During the time the above hang variations are occuring, I can click on the IE shortcut on the
desktop to start another browser session, and have no problems viewing web pages while the
first session is hanging. Then after about 2-4 web page views on the 2nd browser session, it gets
the same problem. Thus, I click on another browser session to repeat the above scenario.


Opinion:
It seems that the browser/operating system is having memory leak problems somewhere
or that it is performing memory garbage collection. I'm not sure.

Question:
Anyone see this on their system? Do you have a solution? Is there some exe, dll, etc file
I'm missing or patch that will clean this up? It sure is slowing down any productivity on
this PC.


:(


#2 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 13 December 2006 - 06:21 PM

Not sure, but if you can get me a process dump of iexplore.exe when this is occurring I can probably tell you what's happening.

First, install the "Debugging Tools for Windows" from:
http://www.microsoft...installx86.mspx

Once these tools are installed, do the following:

1. Create a directory called c:\adplus

2. Open a command prompt and change to the directory where you installed the debugging tools. By default, this is "C:\Program Files\Debugging Tools for Windows"

3. Open IE and reproduce the problem

4. Type the following command in the command prompt:
cscript adplus.vbs -hang -pn iexplore.exe -o c:\adplus


This should generate a hang dump of iexplore.exe in C:\adplus, that can be analyzed via windbg or cdb. If you don't feel comfortable doing it, I can do it if you PM me.

#3 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 14 December 2006 - 02:44 PM

Full Windows debug tools website path.

http://www.microsoft.com/whdc/devtools/deb...installx86.mspx

After running this tool. Should I PM you and send the zipped file to you?

Moreover, should I download any symbol file to go along with the debug tool?

#4 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 14 December 2006 - 03:50 PM

I renamed the dmp file to "pid.dmp"

I ran "cdb -z pid.dmp" and here is the listing I got.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for NTDL
L.DLL -
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(854.a2c): Wake debugger - code 80000007 (first/second chance not available)
eax=042e1000 ebx=0012e380 ecx=0012e25c edx=00000000 esi=77f88f08 edi=000009fc
eip=77f88f13 esp=0012e364 ebp=0012e388 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000297
NTDLL!NtWaitForSingleObject+0xb:
77f88f13 c20c00 ret 0Ch
0:000>

#5 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 14 December 2006 - 08:58 PM

Can you do the following for me?

1. Please add the following system environment variable to your system
Variable Name: _NT_SYMBOL_PATH
Variable Value: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols;c:\websymbols

2. Create a folder on your C: drive called websymbols (c:\websymbols)

3. Open the dump via windbg, and run the following commands:
!analyze -v
~*kb

Paste the output here, because what you've posted thus far tells me nothing. I need to know what was calling into ntdll, and what called that, etc...

#6 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 15 December 2006 - 08:57 AM

Comment: 'Full dump in Hang Mode for IEXPLORE.EXE_running_on_DMVA511033082'
Windows 2000 Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Debug session time: Thu Dec 14 16:05:49.000 2006 (GMT-5)
System Uptime: 1 days 5:29:04.437
Process Uptime: 0 days 0:02:58.000
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols;c:\websymbols
Executable search path is:
....................................................................................................
..............
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(854.a2c): Wake debugger - code 80000007 (first/second chance not available)
eax=042e1000 ebx=0012e380 ecx=0012e25c edx=00000000 esi=77f88f08 edi=000009fc
eip=77f88f13 esp=0012e364 ebp=0012e388 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000297
NTDLL!ZwWaitForSingleObject+0xb:
77f88f13 c20c00 ret 0Ch
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** WARNING: Unable to verify checksum for googletoolbar1.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for googletoolbar1.dll -
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: ntdll!_PEB ***
*** ***
*************************************************************************
*** WARNING: Unable to verify checksum for WeatherStudio.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for WeatherStudio.dll -

FAULTING_IP:
+0
00000000 ?? ???

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: 80000007 (Wake debugger)
ExceptionFlags: 00000000
NumberParameters: 0

BUGCHECK_STR: 80000007

DEFAULT_BUCKET_ID: APPLICATION_FAULT

PROCESS_NAME: IEXPLORE.EXE

ERROR_CODE: (NTSTATUS) 0x80000007 - {Kernel Debugger Awakened} the system debugger was awakened by an interrupt.

LAST_CONTROL_TRANSFER: from 7c59a072 to 77f88f13

STACK_TEXT:
0012e360 7c59a072 000009fc 00000000 0012e380 NTDLL!ZwWaitForSingleObject+0xb
0012e388 7c57b3e9 000009fc 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0012e398 630255c3 000009fc 000493e0 00152638 KERNEL32!WaitForSingleObject+0xf
0012e3d4 63025999 00000000 00152638 041f09f0 WININET!CServerInfo::GetConnection_Fsm+0x325
0012e3e8 630263ca 041f09f0 00040000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0012e400 63026445 00152638 00000000 00000000 WININET!CFsm::Run+0x37
0012e414 6304b191 041f09f0 00152638 042d72c8 WININET!DoFsm+0x21
0012e44c 6304b521 042d72c8 630263ca 042d72c8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0012e454 630263ca 042d72c8 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0012e46c 63026445 00152638 00000000 00000000 WININET!CFsm::Run+0x37
0012e480 6304b585 042d72c8 042b3fd8 6304ce99 WININET!DoFsm+0x21
0012e48c 6304ce99 00000000 00000000 00152638 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0012e4b4 6304d144 04125e30 630263ca 04125e30 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0012e4bc 630263ca 04125e30 042b3fd8 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0012e4d4 63026445 00152638 00000000 00000000 WININET!CFsm::Run+0x37
0012e4e8 6304beda 04125e30 00152638 041e2f08 WININET!DoFsm+0x21
0012e524 6304c1dc 00000000 630263ca 041e2f08 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0012e52c 630263ca 041e2f08 042b3fd8 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0012e544 63026445 00152638 00000000 00000000 WININET!CFsm::Run+0x37
0012e558 6304a54f 041e2f08 042b3fd8 002079b0 WININET!DoFsm+0x21
0012e574 6304abf6 00000001 00152638 002079b0 WININET!HTTP_REQUEST_HANDLE_OBJECT::HttpSendRequest_Start+0x456
0012e584 630263ca 002079b0 00000000 00000000 WININET!CFsm_HttpSendRequest::RunSM+0x55
0012e59c 63026445 00152638 00000000 00000000 WININET!CFsm::Run+0x37
0012e5b0 6303de3e 002079b0 0415c288 00000000 WININET!DoFsm+0x21
0012e5d8 6303df54 00000000 00000000 00000000 WININET!HttpWrapSendRequest+0x125
0012e614 01ad33a1 00cc0068 00000000 00000000 WININET!HttpSendRequestW+0xb8
WARNING: Stack unwind information not available. Following frames may be wrong.
0012e858 01a8db8f 00cc0050 00000050 00cc0068 googletoolbar1!DllRegisterServer+0x55a
0012e884 01a8f1f3 02eb96d8 00000050 041dd850 googletoolbar1+0x1db8f
0012e8c0 01a8fb94 00000050 00000001 0012e970 googletoolbar1+0x1f1f3
0012e9a0 01a90587 041cdf58 0012ea40 006e022f googletoolbar1+0x1fb94
0012e9d0 01a9ccf4 0012ea38 0012ea40 0012e9f3 googletoolbar1+0x20587
0012ea00 01aa7571 0012ea38 0012ea40 01b4e568 googletoolbar1!DllInfoA+0xf9d
0012ea54 01aa7be8 63680c95 0038028e 000002a1 googletoolbar1!DllInfoA+0xb81a
0012ea98 01ae8186 63680c95 0038028e 000002a1 googletoolbar1!DllInfoA+0xbe91
0012eac0 77e4158f 0038028e 000002a1 00000000 googletoolbar1!DllRegisterServer+0x1533f
0012eb78 71519b6e 0012edb0 00000000 0013a548 USER32!__ClientCharToWchar+0x38
0012eb90 715205c1 0012edb0 0012fee8 0013a2d8 BROWSEUI!TimedDispatchMessage+0x35
0012ede8 715206c0 00000000 0012fee8 0013a2d8 BROWSEUI!BrowserThreadProc+0x2d5
0012ee74 71520957 0013a2d8 0013a2d8 00000000 BROWSEUI!BrowserProtectedThreadProc+0x44
0012fef0 71762a0a 0013a2d8 00401350 70a91af4 BROWSEUI!SHOpenFolderWindow+0x1ec
0012ff10 00401ecd 00132ef1 00000001 00780065 SHDOCVW!IEWinMain+0x108
0012ff60 00401f7d 00000004 00000000 00132ef1 IEXPLORE!WinMainT+0x2dc
0012ffc0 7c5989a5 00780065 00000065 7ffdf000 IEXPLORE!ModuleEntry+0x97
0012fff0 00000000 00401ee6 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d


STACK_COMMAND: ~0s; .ecxr ; kb

FAULTING_THREAD: 00000a2c

FOLLOWUP_IP:
WININET!CServerInfo::GetConnection_Fsm+325
630255c3 89442410 mov dword ptr [esp+10h],eax

SYMBOL_STACK_INDEX: 3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: WININET

IMAGE_NAME: WININET.DLL

DEBUG_FLR_IMAGE_TIMESTAMP: 453cfb1e

SYMBOL_NAME: WININET!CServerInfo::GetConnection_Fsm+325

FAILURE_BUCKET_ID: 80000007_WININET!CServerInfo::GetConnection_Fsm+325

BUCKET_ID: 80000007_WININET!CServerInfo::GetConnection_Fsm+325

Followup: MachineOwner
---------

0:000> ~*kb


. 0 Id: dc4.c08 Suspend: 1 Teb: 7ffde000 Unfrozen
ChildEBP RetAddr Args to Child
0012e360 7c59a072 00000764 00000000 0012e380 NTDLL!ZwWaitForSingleObject+0xb
0012e388 7c57b3e9 00000764 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0012e398 630255c3 00000764 000493e0 00152580 KERNEL32!WaitForSingleObject+0xf
0012e3d4 63025999 00000000 00152580 00201bd8 WININET!CServerInfo::GetConnection_Fsm+0x325
0012e3e8 630263ca 00201bd8 00040000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0012e400 63026445 00152580 00000000 00000000 WININET!CFsm::Run+0x37
0012e414 6304b191 00201bd8 00152580 06f7e7c8 WININET!DoFsm+0x21
0012e44c 6304b521 06f7e7c8 630263ca 06f7e7c8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0012e454 630263ca 06f7e7c8 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0012e46c 63026445 00152580 00000000 00000000 WININET!CFsm::Run+0x37
0012e480 6304b585 06f7e7c8 04206c20 6304ce99 WININET!DoFsm+0x21
0012e48c 6304ce99 00000000 00000000 00152580 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0012e4b4 6304d144 04217b48 630263ca 04217b48 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0012e4bc 630263ca 04217b48 04206c20 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0012e4d4 63026445 00152580 00000000 00000000 WININET!CFsm::Run+0x37
0012e4e8 6304beda 04217b48 00152580 041bb240 WININET!DoFsm+0x21
0012e524 6304c1dc 00000000 630263ca 041bb240 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0012e52c 630263ca 041bb240 04206c20 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0012e544 63026445 00152580 00000000 00000000 WININET!CFsm::Run+0x37
0012e558 6304a54f 041bb240 04206c20 02f5bbe8 WININET!DoFsm+0x21

1 Id: dc4.a3c Suspend: 1 Teb: 7ffdd000 Unfrozen
ChildEBP RetAddr Args to Child
00d4fe24 77d595d9 00000108 00d4ff54 00000000 NTDLL!ZwReplyWaitReceivePortEx+0xb
00d4ff74 77d58e4a 77d3afbd 001427d8 77d50101 rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
00d4ff78 77d3afbd 001427d8 77d50101 00130000 rpcrt4!RecvLotsaCallsWrapper+0x9
00d4ffa8 77d37de8 0013fe88 00d4ffec 7c57b396 rpcrt4!BaseCachedThreadRoutine+0x11f
00d4ffb4 7c57b396 00142938 77d50101 00130000 rpcrt4!ThreadStartRoutine+0x18
00d4ffec 00000000 77d37dd0 00142938 00000000 KERNEL32!BaseThreadStart+0x52

2 Id: dc4.b34 Suspend: 1 Teb: 7ffda000 Unfrozen
ChildEBP RetAddr Args to Child
0203fd20 7c59a23d 00000004 0203fd48 00000001 NTDLL!ZwWaitForMultipleObjects+0xb
0203fd70 7c59a150 0203fd48 00000001 00000000 KERNEL32!WaitForMultipleObjectsEx+0xea
0203fd88 778322b2 00000004 0203feb0 00000000 KERNEL32!WaitForMultipleObjects+0x17
0203ffb4 7c57b396 00000005 7ffde000 7c3280d0 rtutils!TraceServerThread+0xde
0203ffec 00000000 778321fe 001f30b8 00000000 KERNEL32!BaseThreadStart+0x52

3 Id: dc4.cd8 Suspend: 1 Teb: 7ffd9000 Unfrozen
ChildEBP RetAddr Args to Child
02a2fac8 74fd1394 00000528 00000001 02a2faf0 NTDLL!ZwWaitForSingleObject+0xb
02a2fb04 74fd3c59 00000528 0000052c 00000000 msafd!SockWaitForSingleObject+0x1a8
02a2fbf0 750312f5 00000001 02a2fe84 02a2fc7c msafd!WSPSelect+0x24e
02a2fc54 6302469e 00000001 02a2fe84 02a2fc7c ws2_32!select+0xe7
02a2ffb0 6302487d 7c57b396 001e8a50 77d8a200 WININET!ICAsyncThread::SelectThread+0x228
02a2ffb4 7c57b396 001e8a50 77d8a200 001328d8 WININET!ICAsyncThread::SelectThreadWrapper+0x9
02a2ffec 00000000 63024874 001e8a50 00000000 KERNEL32!BaseThreadStart+0x52

4 Id: dc4.464 Suspend: 1 Teb: 7ffd7000 Unfrozen
ChildEBP RetAddr Args to Child
02c2ff08 7c59a23d 00000001 02c2ff30 00000001 NTDLL!ZwWaitForMultipleObjects+0xb
02c2ff58 7c59a150 02c2ff30 00000001 00000000 KERNEL32!WaitForMultipleObjectsEx+0xea
02c2ff70 63037241 00000001 02c2ffa8 00000000 KERNEL32!WaitForMultipleObjects+0x17
02c2ffb0 63037279 7c57b396 001bb420 00000001 WININET!AUTO_PROXY_DLLS::DoThreadProcessing+0x9f
02c2ffb4 7c57b396 001bb420 00000001 00000001 WININET!AutoProxyThreadFunc+0xb
02c2ffec 00000000 6303726e 001bb420 00000000 KERNEL32!BaseThreadStart+0x52

5 Id: dc4.c60 Suspend: 1 Teb: 7ffd5000 Unfrozen
ChildEBP RetAddr Args to Child
02e2feb8 7c585433 00000104 02e2ff0c 02e2fefc NTDLL!NtRemoveIoCompletion+0xb
02e2fee4 77d818ff 00000104 02e2ff1c 02e2ff0c KERNEL32!GetQueuedCompletionStatus+0x27
02e2ff20 77d51484 000493e0 02e2ff60 02e2ff5c rpcrt4!COMMON_ProcessCalls+0x9e
02e2ff74 77d512bd 77d3afbd 001417a0 00000000 rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
02e2ff78 77d3afbd 001417a0 00000000 00000000 rpcrt4!ProcessIOEventsWrapper+0x9
02e2ffa8 77d37de8 0013fe88 02e2ffec 7c57b396 rpcrt4!BaseCachedThreadRoutine+0x11f
02e2ffb4 7c57b396 0019d3c8 00000000 00000000 rpcrt4!ThreadStartRoutine+0x18
02e2ffec 00000000 77d37dd0 0019d3c8 00000000 KERNEL32!BaseThreadStart+0x52

6 Id: dc4.7b8 Suspend: 1 Teb: 7ffd4000 Unfrozen
ChildEBP RetAddr Args to Child
0332ff80 74fd6363 00000624 0332ffbc 0332ffb0 NTDLL!NtRemoveIoCompletion+0xb
0332ffb4 7c57b396 74fd9048 02b2f990 77fcae15 msafd!SockAsyncThread+0x52
0332ffec 00000000 74fd6311 02eba520 00000000 KERNEL32!BaseThreadStart+0x52

7 Id: dc4.778 Suspend: 1 Teb: 7ffaf000 Unfrozen
ChildEBP RetAddr Args to Child
03c2ff54 7c59a072 00000688 00000000 03c2ff74 NTDLL!ZwWaitForSingleObject+0xb
03c2ff7c 7c57b3e9 00000688 000927c0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
03c2ff8c 6377fb1e 00000688 000927c0 0012e1b4 KERNEL32!WaitForSingleObject+0xf
03c2ffa8 637805dc 1a41b25d 63780bc6 7c57b396 MSHTML!CDwnTaskExec::ThreadExec+0xaf
03c2ffb0 63780bc6 7c57b396 03332aa0 0012e1b4 MSHTML!CExecFT::ThreadProc+0x26
03c2ffb4 7c57b396 03332aa0 0012e1b4 1a41b25d MSHTML!CExecFT::StaticThreadProc+0x9
03c2ffec 00000000 63780bbd 03332aa0 00000000 KERNEL32!BaseThreadStart+0x52

8 Id: dc4.c54 Suspend: 1 Teb: 7ffad000 Unfrozen
ChildEBP RetAddr Args to Child
0401ff54 7c59a072 000006ac 00000000 0401ff74 NTDLL!ZwWaitForSingleObject+0xb
0401ff7c 7c57b3e9 000006ac 000927c0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0401ff8c 6377fb1e 000006ac 000927c0 00000001 KERNEL32!WaitForSingleObject+0xf
0401ffa8 637805dc 03d2f2f8 63780bc6 7c57b396 MSHTML!CDwnTaskExec::ThreadExec+0xaf
0401ffb0 63780bc6 7c57b396 03385bd0 00000001 MSHTML!CExecFT::ThreadProc+0x26
0401ffb4 7c57b396 03385bd0 00000001 03d2f2f8 MSHTML!CExecFT::StaticThreadProc+0x9
0401ffec 00000000 63780bbd 03385bd0 00000000 KERNEL32!BaseThreadStart+0x52

9 Id: dc4.78c Suspend: 1 Teb: 7ffaa000 Unfrozen
ChildEBP RetAddr Args to Child
048eff20 7c59a23d 00000002 048eff48 00000001 NTDLL!ZwWaitForMultipleObjects+0xb
048eff70 7c59a150 048eff48 00000001 00000000 KERNEL32!WaitForMultipleObjectsEx+0xea
048eff88 77562c1a 00000002 048effa4 00000000 KERNEL32!WaitForMultipleObjects+0x17
048effb4 7c57b396 00000000 001325f8 7ffdebf8 wdmaud!MixerCallbackThread+0x40
048effec 00000000 77562bda 00000000 00000000 KERNEL32!BaseThreadStart+0x52

10 Id: dc4.7f8 Suspend: 1 Teb: 7ffa9000 Unfrozen
ChildEBP RetAddr Args to Child
049eff78 77575c36 049eff98 00000000 00000000 USER32!ExitWindowsWorker+0x7e
049effb4 7c57b396 000007d8 77595428 001284cc winmm!mciwindow+0x6d
049effec 00000000 77575bb9 000007d8 00000000 KERNEL32!BaseThreadStart+0x52

11 Id: dc4.9c0 Suspend: 1 Teb: 7ffa8000 Unfrozen
ChildEBP RetAddr Args to Child
05bfff50 7c59a072 0000084c 00000000 00000000 NTDLL!ZwWaitForSingleObject+0xb
05bfff78 7c57b3e9 0000084c ffffffff 00000000 KERNEL32!WaitForSingleObjectEx+0x71
05bfff88 636af7c6 0000084c ffffffff 00000000 KERNEL32!WaitForSingleObject+0xf
05bfffa8 637805dc 00000000 63780bc6 7c57b396 MSHTML!CTimerMan::ThreadExec+0x88
05bfffb0 63780bc6 7c57b396 03349920 00000000 MSHTML!CExecFT::ThreadProc+0x26
05bfffb4 7c57b396 03349920 00000000 00000000 MSHTML!CExecFT::StaticThreadProc+0x9
00000000 00000000 00000000 00000000 00000000 KERNEL32!BaseThreadStart+0x52

12 Id: dc4.934 Suspend: 1 Teb: 7ffa7000 Unfrozen
ChildEBP RetAddr Args to Child
0699ff30 7c585433 000008a4 0699ff8c 0699ff74 NTDLL!NtRemoveIoCompletion+0xb
0699ff5c 35c5a438 000008a4 0699ff88 0699ff8c KERNEL32!GetQueuedCompletionStatus+0x27
0699ffb4 7c57b396 060903ec 00340035 00330035 DXTRANS!TMThreadProc+0x3c
0699ffec 00000000 35c5a3fc 060903ec 00000000 KERNEL32!BaseThreadStart+0x52

13 Id: dc4.6c4 Suspend: 1 Teb: 7ffa6000 Unfrozen
ChildEBP RetAddr Args to Child
06a9ff30 7c585433 000008a4 06a9ff8c 06a9ff74 NTDLL!NtRemoveIoCompletion+0xb
06a9ff5c 35c5a438 000008a4 06a9ff88 06a9ff8c KERNEL32!GetQueuedCompletionStatus+0x27
06a9ffb4 7c57b396 060903ec 00340035 00330035 DXTRANS!TMThreadProc+0x3c
06a9ffec 00000000 35c5a3fc 060903ec 00000000 KERNEL32!BaseThreadStart+0x52

14 Id: dc4.8fc Suspend: 1 Teb: 7ffdb000 Unfrozen
ChildEBP RetAddr Args to Child
084eff5c 7c59a2d1 00000000 084eff74 7c59a001 NTDLL!ZwDelayExecution+0xb
084eff7c 7c59a29c 0000ea60 00000000 7ce89acc KERNEL32!SleepEx+0x32
084eff88 7ce89acc 0000ea60 7ce85ba7 00000000 KERNEL32!Sleep+0xb
084eff90 7ce85ba7 00000000 7ce20000 041fa928 OLE32!CROIDTable::WorkerThreadLoop+0xc
084effa8 7ce85aff 7ce37d85 7ce37d70 7c57b396 OLE32!CRpcThread::WorkerLoop+0x22
084effb4 7c57b396 041fa928 7ce37d85 7ce37d70 OLE32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
084effec 00000000 7ce85ae5 041fa928 00000000 KERNEL32!BaseThreadStart+0x52

15 Id: dc4.74c Suspend: 1 Teb: 7ffdc000 Unfrozen
ChildEBP RetAddr Args to Child
0a91fe24 77d595d9 00000108 0a91ff54 00000000 NTDLL!ZwReplyWaitReceivePortEx+0xb
0a91ff74 77d58e4a 77d3aeed 001427d8 00000000 rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
0a91ff78 77d3aeed 001427d8 00000000 00000000 rpcrt4!RecvLotsaCallsWrapper+0x9
0a91ffa8 77d37de8 02eed920 0a91ffec 7c57b396 rpcrt4!BaseCachedThreadRoutine+0x4f
0a91ffb4 7c57b396 04123fb0 00000000 00000000 rpcrt4!ThreadStartRoutine+0x18
0a91ffec 00000000 77d37dd0 04123fb0 00000000 KERNEL32!BaseThreadStart+0x52

16 Id: dc4.7b4 Suspend: 1 Teb: 7ffae000 Unfrozen
ChildEBP RetAddr Args to Child
0ab4f76c 7c59a072 00000a7c 00000000 0ab4f78c NTDLL!ZwWaitForSingleObject+0xb
0ab4f794 7c57b3e9 00000a7c 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0ab4f7a4 630255c3 00000a7c 000493e0 02f47cd0 KERNEL32!WaitForSingleObject+0xf
0ab4f7e0 63025999 00000000 02f47cd0 041fce90 WININET!CServerInfo::GetConnection_Fsm+0x325
0ab4f7f4 630263ca 041fce90 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0ab4f80c 63026445 02f47cd0 00000000 00000000 WININET!CFsm::Run+0x37
0ab4f820 6304b191 041fce90 02f47cd0 0422f800 WININET!DoFsm+0x21
0ab4f858 6304b521 0422f800 630263ca 0422f800 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0ab4f860 630263ca 0422f800 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0ab4f878 63026445 02f47cd0 00000000 00000000 WININET!CFsm::Run+0x37
0ab4f88c 6304b585 0422f800 04234de0 6304ce99 WININET!DoFsm+0x21
0ab4f898 6304ce99 00000000 00000000 02f47cd0 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0ab4f8c0 6304d144 04148f28 630263ca 04148f28 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0ab4f8c8 630263ca 04148f28 04234de0 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0ab4f8e0 63026445 02f47cd0 00000000 00000000 WININET!CFsm::Run+0x37
0ab4f8f4 6304beda 04148f28 02f47cd0 0412dbc0 WININET!DoFsm+0x21
0ab4f930 6304c1dc 00000000 630263ca 0412dbc0 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0ab4f938 630263ca 0412dbc0 04234de0 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0ab4f950 63026445 02f47cd0 00000000 00000000 WININET!CFsm::Run+0x37
0ab4f964 6304a54f 0412dbc0 04234de0 02f05d80 WININET!DoFsm+0x21

17 Id: dc4.7f0 Suspend: 1 Teb: 7ffac000 Unfrozen
ChildEBP RetAddr Args to Child
0ac5f76c 7c59a072 0000054c 00000000 0ac5f78c NTDLL!ZwWaitForSingleObject+0xb
0ac5f794 7c57b3e9 0000054c 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0ac5f7a4 630255c3 0000054c 000493e0 04123580 KERNEL32!WaitForSingleObject+0xf
0ac5f7e0 63025999 00000000 04123580 0412f4d8 WININET!CServerInfo::GetConnection_Fsm+0x325
0ac5f7f4 630263ca 0412f4d8 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0ac5f80c 63026445 04123580 00000000 00000000 WININET!CFsm::Run+0x37
0ac5f820 6304b191 0412f4d8 04123580 04132490 WININET!DoFsm+0x21
0ac5f858 6304b521 04132490 630263ca 04132490 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0ac5f860 630263ca 04132490 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0ac5f878 63026445 04123580 00000000 00000000 WININET!CFsm::Run+0x37
0ac5f88c 6304b585 04132490 02f92d40 6304ce99 WININET!DoFsm+0x21
0ac5f898 6304ce99 00000000 00000000 04123580 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0ac5f8c0 6304d144 04147f38 630263ca 04147f38 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0ac5f8c8 630263ca 04147f38 02f92d40 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0ac5f8e0 63026445 04123580 00000000 00000000 WININET!CFsm::Run+0x37
0ac5f8f4 6304beda 04147f38 04123580 04136ac0 WININET!DoFsm+0x21
0ac5f930 6304c1dc 00000000 630263ca 04136ac0 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0ac5f938 630263ca 04136ac0 02f92d40 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0ac5f950 63026445 04123580 00000000 00000000 WININET!CFsm::Run+0x37
0ac5f964 6304a54f 04136ac0 02f92d40 001d65a8 WININET!DoFsm+0x21

18 Id: dc4.c24 Suspend: 1 Teb: 7ffab000 Unfrozen
ChildEBP RetAddr Args to Child
0ad6f76c 7c59a072 00000548 00000000 0ad6f78c NTDLL!ZwWaitForSingleObject+0xb
0ad6f794 7c57b3e9 00000548 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0ad6f7a4 630255c3 00000548 000493e0 02eec7d8 KERNEL32!WaitForSingleObject+0xf
0ad6f7e0 63025999 00000000 02eec7d8 041bbb80 WININET!CServerInfo::GetConnection_Fsm+0x325
0ad6f7f4 630263ca 041bbb80 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0ad6f80c 63026445 02eec7d8 00000000 00000000 WININET!CFsm::Run+0x37
0ad6f820 6304b191 041bbb80 02eec7d8 04187c20 WININET!DoFsm+0x21
0ad6f858 6304b521 04187c20 630263ca 04187c20 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0ad6f860 630263ca 04187c20 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0ad6f878 63026445 02eec7d8 00000000 00000000 WININET!CFsm::Run+0x37
0ad6f88c 6304b585 04187c20 04158a50 6304ce99 WININET!DoFsm+0x21
0ad6f898 6304ce99 00000000 00000000 02eec7d8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0ad6f8c0 6304d144 02eec160 630263ca 02eec160 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0ad6f8c8 630263ca 02eec160 04158a50 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0ad6f8e0 63026445 02eec7d8 00000000 00000000 WININET!CFsm::Run+0x37
0ad6f8f4 6304beda 02eec160 02eec7d8 0021f860 WININET!DoFsm+0x21
0ad6f930 6304c1dc 00000000 630263ca 0021f860 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0ad6f938 630263ca 0021f860 04158a50 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0ad6f950 63026445 02eec7d8 00000000 00000000 WININET!CFsm::Run+0x37
0ad6f964 6304a54f 0021f860 04158a50 02f4cd88 WININET!DoFsm+0x21

19 Id: dc4.98c Suspend: 1 Teb: 7ffa5000 Unfrozen
ChildEBP RetAddr Args to Child
0ae6f76c 7c59a072 000005f8 00000000 0ae6f78c NTDLL!ZwWaitForSingleObject+0xb
0ae6f794 7c57b3e9 000005f8 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0ae6f7a4 630255c3 000005f8 000493e0 06f63fa0 KERNEL32!WaitForSingleObject+0xf
0ae6f7e0 63025999 00000000 06f63fa0 02f609e8 WININET!CServerInfo::GetConnection_Fsm+0x325
0ae6f7f4 630263ca 02f609e8 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0ae6f80c 63026445 06f63fa0 00000000 00000000 WININET!CFsm::Run+0x37
0ae6f820 6304b191 02f609e8 06f63fa0 02f803f8 WININET!DoFsm+0x21
0ae6f858 6304b521 02f803f8 630263ca 02f803f8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0ae6f860 630263ca 02f803f8 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0ae6f878 63026445 06f63fa0 00000000 00000000 WININET!CFsm::Run+0x37
0ae6f88c 6304b585 02f803f8 04205b58 6304ce99 WININET!DoFsm+0x21
0ae6f898 6304ce99 00000000 00000000 06f63fa0 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0ae6f8c0 6304d144 0422eed0 630263ca 0422eed0 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0ae6f8c8 630263ca 0422eed0 04205b58 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0ae6f8e0 63026445 06f63fa0 00000000 00000000 WININET!CFsm::Run+0x37
0ae6f8f4 6304beda 0422eed0 06f63fa0 04123bc8 WININET!DoFsm+0x21
0ae6f930 6304c1dc 00000000 630263ca 04123bc8 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0ae6f938 630263ca 04123bc8 04205b58 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0ae6f950 63026445 06f63fa0 00000000 00000000 WININET!CFsm::Run+0x37
0ae6f964 6304a54f 04123bc8 04205b58 06f2bbb0 WININET!DoFsm+0x21

20 Id: dc4.a4c Suspend: 1 Teb: 7ffa4000 Unfrozen
ChildEBP RetAddr Args to Child
0af6f76c 7c59a072 00000608 00000000 0af6f78c NTDLL!ZwWaitForSingleObject+0xb
0af6f794 7c57b3e9 00000608 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0af6f7a4 630255c3 00000608 000493e0 02f176a0 KERNEL32!WaitForSingleObject+0xf
0af6f7e0 63025999 00000000 02f176a0 0423d430 WININET!CServerInfo::GetConnection_Fsm+0x325
0af6f7f4 630263ca 0423d430 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0af6f80c 63026445 02f176a0 00000000 00000000 WININET!CFsm::Run+0x37
0af6f820 6304b191 0423d430 02f176a0 0423cb30 WININET!DoFsm+0x21
0af6f858 6304b521 0423cb30 630263ca 0423cb30 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0af6f860 630263ca 0423cb30 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0af6f878 63026445 02f176a0 00000000 00000000 WININET!CFsm::Run+0x37
0af6f88c 6304b585 0423cb30 04249018 6304ce99 WININET!DoFsm+0x21
0af6f898 6304ce99 00000000 00000000 02f176a0 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0af6f8c0 6304d144 02eedaa8 630263ca 02eedaa8 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0af6f8c8 630263ca 02eedaa8 04249018 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0af6f8e0 63026445 02f176a0 00000000 00000000 WININET!CFsm::Run+0x37
0af6f8f4 6304beda 02eedaa8 02f176a0 02f4ce68 WININET!DoFsm+0x21
0af6f930 6304c1dc 00000000 630263ca 02f4ce68 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0af6f938 630263ca 02f4ce68 04249018 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0af6f950 63026445 02f176a0 00000000 00000000 WININET!CFsm::Run+0x37
0af6f964 6304a54f 02f4ce68 04249018 041c4948 WININET!DoFsm+0x21

21 Id: dc4.ba4 Suspend: 1 Teb: 7ffa3000 Unfrozen
ChildEBP RetAddr Args to Child
0b06f76c 7c59a072 00000a68 00000000 0b06f78c NTDLL!ZwWaitForSingleObject+0xb
0b06f794 7c57b3e9 00000a68 000492f5 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0b06f7a4 630255c3 00000a68 000492f5 04186410 KERNEL32!WaitForSingleObject+0xf
0b06f7e0 63025999 00000000 04186410 0422f658 WININET!CServerInfo::GetConnection_Fsm+0x325
0b06f7f4 630263ca 0422f658 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0b06f80c 63026445 04186410 00000000 00000000 WININET!CFsm::Run+0x37
0b06f820 6304b191 0422f658 04186410 041209b0 WININET!DoFsm+0x21
0b06f858 6304b521 041209b0 630263ca 041209b0 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0b06f860 630263ca 041209b0 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0b06f878 63026445 04186410 00000000 00000000 WININET!CFsm::Run+0x37
0b06f88c 6304b585 041209b0 02f7bfb8 6304ce99 WININET!DoFsm+0x21
0b06f898 6304ce99 00000000 00000000 04186410 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0b06f8c0 6304d144 04120928 630263ca 04120928 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0b06f8c8 630263ca 04120928 02f7bfb8 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0b06f8e0 63026445 04186410 00000000 00000000 WININET!CFsm::Run+0x37
0b06f8f4 6304beda 04120928 04186410 0412de70 WININET!DoFsm+0x21
0b06f930 6304c1dc 00000000 630263ca 0412de70 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0b06f938 630263ca 0412de70 02f7bfb8 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0b06f950 63026445 04186410 00000000 00000000 WININET!CFsm::Run+0x37
0b06f964 6304a54f 0412de70 02f7bfb8 04134bc8 WININET!DoFsm+0x21

22 Id: dc4.824 Suspend: 1 Teb: 7ffa2000 Unfrozen
ChildEBP RetAddr Args to Child
0b16f76c 7c59a072 00000a78 00000000 0b16f78c NTDLL!ZwWaitForSingleObject+0xb
0b16f794 7c57b3e9 00000a78 000493e0 00000000 KERNEL32!WaitForSingleObjectEx+0x71
0b16f7a4 630255c3 00000a78 000493e0 041356b8 KERNEL32!WaitForSingleObject+0xf
0b16f7e0 63025999 00000000 041356b8 04256570 WININET!CServerInfo::GetConnection_Fsm+0x325
0b16f7f4 630263ca 04256570 00000000 00000000 WININET!CFsm_GetConnection::RunSM+0x56
0b16f80c 63026445 041356b8 00000000 00000000 WININET!CFsm::Run+0x37
0b16f820 6304b191 04256570 041356b8 04120ac0 WININET!DoFsm+0x21
0b16f858 6304b521 04120ac0 630263ca 04120ac0 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x188
0b16f860 630263ca 04120ac0 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x2f
0b16f878 63026445 041356b8 00000000 00000000 WININET!CFsm::Run+0x37
0b16f88c 6304b585 04120ac0 02eb8668 6304ce99 WININET!DoFsm+0x21
0b16f898 6304ce99 00000000 00000000 041356b8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2c
0b16f8c0 6304d144 04120a38 630263ca 04120a38 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x85
0b16f8c8 630263ca 04120a38 02eb8668 00000000 WININET!CFsm_MakeConnection::RunSM+0x2a
0b16f8e0 63026445 041356b8 00000000 00000000 WININET!CFsm::Run+0x37
0b16f8f4 6304beda 04120a38 041356b8 02f61188 WININET!DoFsm+0x21
0b16f930 6304c1dc 00000000 630263ca 02f61188 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x91
0b16f938 630263ca 02f61188 02eb8668 00000000 WININET!CFsm_SendRequest::RunSM+0x2a
0b16f950 63026445 041356b8 00000000 00000000 WININET!CFsm::Run+0x37
0b16f964 6304a54f 02f61188 02eb8668 02eacbe0 WININET!DoFsm+0x21

23 Id: dc4.a5c Suspend: 1 Teb: 7ffa0000 Unfrozen
ChildEBP RetAddr Args to Child
0b36fe58 7c59a23d 00000002 0b36fe80 00000001 NTDLL!ZwWaitForMultipleObjects+0xb
0b36fea8 77e4169f 0b36fe80 00000001 00000000 KERNEL32!WaitForMultipleObjectsEx+0xea
0b36ff04 77e41706 0b36fed0 70accb58 0000ea60 USER32!__ClientExtTextOutW+0x3f
0b36ff20 70abb4ad 00000001 70accb58 00000000 USER32!__ClientGetTextExtentPointW+0x48
0b36ff74 70abb835 0b36ffa0 0b36ffa4 0b36ffa8 SHLWAPI!CThreadPool::RemoveWorkItem+0x77
0b36ffac 70abb9f9 00130178 7c57b396 00000000 SHLWAPI!CThreadPool::Worker+0x2c
0b36ffb4 7c57b396 00000000 00130178 00130178 SHLWAPI!CThreadPool::WorkerThread+0x30
0b36ffec 00000000 70abb9c9 00000000 00000000 KERNEL32!BaseThreadStart+0x52
0:000> lmvm WININET
start end module name
63000000 63095000 WININET (pdb symbols) c:\websymbols\wininet.pdb\453CFB1E1\wininet.pdb
Loaded symbol image file: WININET.DLL
Image path: C:\WINNT\system32\WININET.DLL
Image name: WININET.DLL
Timestamp: Mon Oct 23 13:25:50 2006 (453CFB1E)
CheckSum: 0009C263
ImageSize: 00095000
File version: 6.0.2800.1586
Product version: 6.0.2800.1586
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wininet.dll
OriginalFilename: wininet.dll
ProductVersion: 6.00.2800.1586
FileVersion: 6.00.2800.1586
FileDescription: Internet Extensions for Win32
LegalCopyright: © Microsoft Corporation. All rights reserved.

#7 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 15 December 2006 - 01:03 PM

Uninstall the google toolbar, and the problem will likely go away. It's doing a register server in the registry, and then it looks like it's talking to google's servers, and we are pending the toolbar's response (and it hasn't responded yet). IE traffic will likely fail (and possibly other network traffic on the box as well) until the pending register server request finishes (which it doesn't appear that it will), and thus removal of the toolbar should clear this up. Ultimately a reinstall of the latest version may make the toolbar work properly again.

#8 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 15 December 2006 - 01:36 PM

Google toolbar vs WeatherStudio toolbar?

Thanks. I'll try removing and reinstalling the toolbar.

I'm wondering how you could tell it was the Google Toolbar vs. the other
toolbar called WeatherStudio?

I realize that "googleToolbar" appeared
first after the "Exception Analysis" header in the dump followed by the debugger
complaining about the symbols and then the WeatherStudio.dll toolbar message.

Is the ordering above how you could tell?

Moreover, the header error message about the "debugger symbols not being the
correct version" a problem? They were the ones to come down. Moreover, how
would I correct this?


The stack dump only showed a connection stuck open which I assumed time outs
after 5 minutes and then the browser will show can't display page with a ServerInfo "getconnection".

What does "Fsm" mean?


NTDLL!ZwWaitForSingleObject+0xb
KERNEL32!WaitForSingleObjectEx+0x71
KERNEL32!WaitForSingleObject+0xf
WININET!CServerInfo::GetConnection_Fsm+0x325

#9 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 16 December 2006 - 03:18 AM

View Postmikesw, on Dec 15 2006, 02:36 PM, said:

I'm wondering how you could tell it was the Google Toolbar vs. the other
toolbar called WeatherStudio?

I do not see the WeatherStudio toolbar doing anything in this dump other than load, although anything's possible with toolbars. I'll explain a bit on why I believe it's not the WeatherStudio toolbar below.

View Postmikesw, on Dec 15 2006, 02:36 PM, said:

I realize that "googleToolbar" appeared
first after the "Exception Analysis" header in the dump followed by the debugger
complaining about the symbols and then the WeatherStudio.dll toolbar message.

Is the ordering above how you could tell?

Well, yes, actually, it helps quite a bit. The symbol file errors don't tell me what caused the problem, although they do tell me what was loaded inside the process that the debugger was unable to match to symbols from the Microsoft symbol server (i.e. what 3rd party .dll's are running in the process). Also, dumps are read from the bottom up (the lowest thread is the oldest, and the highest thread is the newest) - and in this case, the thread I see with an open connection pending is running something in "googletoolbar1", or googletoolbar1.dll, and it is in the newest (in this case, also the active) thread, thread 0.

View Postmikesw, on Dec 15 2006, 02:36 PM, said:

Moreover, the header error message about the "debugger symbols not being the
correct version" a problem? They were the ones to come down. Moreover, how
would I correct this?

Without private (Microsoft internal) symbols for some of these, you don't. And you'll not resolve non-Microsoft symbols (like googletoolbar or weathertoolbar) without adding those yourself, either. This is not a concern.

View Postmikesw, on Dec 15 2006, 02:36 PM, said:

The stack dump only showed a connection stuck open which I assumed time outs
after 5 minutes and then the browser will show can't display page with a ServerInfo "getconnection".

What does "Fsm" mean?

NTDLL!ZwWaitForSingleObject+0xb
KERNEL32!WaitForSingleObjectEx+0x71
KERNEL32!WaitForSingleObject+0xf
WININET!CServerInfo::GetConnection_Fsm+0x325

Basically, a WININET!CServerInfo::GetConnection_Fsm call is a chained function for wininet on 2000 SP4 w/IE6 SP1 and XP SP1 (it's a call that actually does 4 functions - these are all documented on MSDN, btw):
1. EnterCriticalSection
2. CServerInfo::KeepAliveWaiters
- This is actually two more functions within wininet.dll itself:
a. EnterCriticalSection
b. LeaveCriticalSection
3. LeaveCriticalSection
4. GetCurrentThreadId

What we see, now that we know what that call actually does, is that the googletoolbar1.dll module has actually initiated a connection with a remote server (via wininet, because we're in the IE process space), and we're waiting on it via kernel32. So, either we'll get a response back from the remote server, and the thread will continue, or we'll timeout and the thread will die. There's no way to know if this will be fatal for the IE process or not, but it doesn't matter - there's no reason for a toolbar (or any other add-on) to hold a connection open like this.

#10 User is offline   mikesw 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 355
  • Joined: 05-October 05

Posted 18 December 2006 - 06:32 AM

Thanks for the info.
The following also shows googletoolbar in the stack trace.
I missed this when I read the dumps.

Quote

WARNING: Stack unwind information not available. Following frames may be wrong.
0012e858 01a8db8f 00cc0050 00000050 00cc0068 googletoolbar1!DllRegisterServer+0x55a
0012e884 01a8f1f3 02eb96d8 00000050 041dd850 googletoolbar1+0x1db8f


I removed the googletoolbar and the 3-4 page views before halting disapppeared. Then
I got 12-15 page views before halting again. I then removed the weatherstudio toolbar
and all the problems went away. Moreover, the browser has signaficantly sped up for
page views. I then updated from googletoolbar 3.0.131 to 4.x and the browser is still working.
I haven't reinstalled the weatherstudio toolbar from v3.3.0 to v4.x since alot of the features it has I don't
need anymore since googletoolbar does most of them. So I guess MSoft made some changes
within the last 6 months with the patches that breaks these older toolbar versions thus requiring
an update.

This post has been edited by mikesw: 18 December 2006 - 06:35 AM


#11 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 18 December 2006 - 08:16 AM

That is very possible - glad to hear you got everything working again :)

#12 User is offline   LuckMan212 

  • Group: Members
  • Posts: 9
  • Joined: 17-April 05

Posted 16 January 2009 - 06:04 PM

hi cluberti :hello: i've got similar situation to mike above- I'm getting some hangs in iexplore.exe and am trying to debug it using WinDbg as you've laid out above. I've gotten about 70% through the process but I am kind of stuck on knowing how to make heads or tails of the call stacks. I sent you a PM, do you think you might be able to take a look at my .DMP file if I posted it for you?

#13 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 16 January 2009 - 06:16 PM

Sure, just upload them and point me at the location, and we can look.

#14 User is offline   LuckMan212 

  • Group: Members
  • Posts: 9
  • Joined: 17-April 05

Posted 16 January 2009 - 06:49 PM

ok, I've zipped up the dump folder and uploaded it:
http://drop.io/4avkcl0

I got your PM about trying to debug a 32bit app with a 64-bit debugger :blushing: doh!
I am downloading the 32bit WinDbg now, let me give it another go...

#15 User is offline   LuckMan212 

  • Group: Members
  • Posts: 9
  • Joined: 17-April 05

Posted 16 January 2009 - 06:54 PM

whoops-- I've gone and uploaded the wrong dump file. :blushing:
please dont download that one.
I'm sending the correct one now.

#16 User is offline   LuckMan212 

  • Group: Members
  • Posts: 9
  • Joined: 17-April 05

Posted 17 January 2009 - 10:57 AM

alright, i've uploaded the correct dump files now:

hang_mode__date_01-16-2009__time_17-24-09pm.zip

download from: http://drop.io/4avkcl0

By the way, I installed the 32bit version of Windbg but when I opened the dump files they basically looked the same. In the docs for the x64 edition, it states

"When to Use 64-bit Debugging Tools
The 64-bit versions of Debugging Tools for Windows allow you to debug both 32-bit and 64-bit user-mode applications running on 64-bit processors. Use this package to debug both the application and the WOW64 emulator."

So are you sure I cannot debug 32bit apps in the 64bit Windbg? Anyway, I really appreciate any sort of help sifting through these dumps, because I think I have the right tools but not the know-how. :blink:

#17 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 17 January 2009 - 09:37 PM

Yes, you can - but it's not as easy. You will need to do .effmach x86; .load wow64exts to see the x86 threads - then, you have to know that there are some differences in debugging x86 in x64 windbg. I'd rather people new at this use the right debugger architecture for the bitness of the app they're debugging first, until you're comfortable, before doing x86 debugging in x64 windbg.

Anyway, onto the fun:

Thread 0 (remember how I said x86 on x64 is different? I'm looking at this in x64 windbg - note that the x86 "thread 0" is really thread 3 under wow64, for example) is waiting for a worker thread to complete, which means the browser is going to appear "hung" until the worker thread returns:
// x86 Thread 0 - the "UI" thread, is waiting:
0:003:x86> k
ChildEBP		  RetAddr		   
03fef62c 774adcea ntdll_77af0000!NtWaitForMultipleObjects+0x15
03fef6c8 77648f76 kernel32!WaitForMultipleObjectsEx+0x11d
03fef71c 6e906071 user32!RealMsgWaitForMultipleObjectsEx+0x14d
WARNING: Frame IP not in any known module. Following frames may be wrong.
03fef73c 6e90af93 ieui+0x6071
03fef770 6e90b4ea ieui+0xaf93
03fef790 6e90b447 ieui+0xb4ea
03fef7e4 76052cce ieui+0xb447
03fef81c 76052deb msvcrt!_endthreadex+0x44
03fef824 7751e3f3 msvcrt!_endthreadex+0xce
03fef830 77b6cfed kernel32!BaseThreadInitThunk+0xe
03fef870 77b6d1ff ntdll_77af0000!__RtlUserThreadStart+0x23
03fef888 00000000 ntdll_77af0000!_RtlUserThreadStart+0x1b

// The worker thread - it looks like you browsed away from a page, and IE is waiting for the flash plugin to unload:
0:004:x86> k
ChildEBP		  RetAddr		   
043af478 774a1270 ntdll_77af0000!ZwWaitForSingleObject+0x15
043af4e8 774a11d8 kernel32!WaitForSingleObjectEx+0xbe
043af4fc 69b3f74f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may be wrong.
043af50c 699ffdbf Flash10a!DllUnregisterServer+0x3055c
043af51c 69ad01e8 Flash10a+0x1fdbf
043af608 69b1dc0a Flash10a+0xf01e8
043af688 69b1e4f8 Flash10a!DllUnregisterServer+0xea17
043af6d4 6e94e095 Flash10a!DllUnregisterServer+0xf305
043af700 6e94de5e jscript!GcAlloc::ReclaimGarbage+0x76
043af71c 6e94dedc jscript!GcContext::Reclaim+0x93
043af730 6e95a62e jscript!GcContext::Collect+0x9a
043af73c 6e9443fd jscript!GcContext::ExhaustiveCollect+0x1c
043af754 6e944cd2 jscript!CSession::Close+0x10b
043af774 6f7f44b0 jscript!COleScript::Close+0x82
043af7a4 6f84d2cd mshtml!DllCanUnloadNow+0x14f
043af7b0 6f84d2b4 mshtml!MatchExactGetIDsOfNames+0x1822f
043af7cc 6f84d29b mshtml!MatchExactGetIDsOfNames+0x18216
043af848 6f84d4d2 mshtml!MatchExactGetIDsOfNames+0x181fd
043af860 6f84d438 mshtml!MatchExactGetIDsOfNames+0x18434
043af888 6f7f4991 mshtml!MatchExactGetIDsOfNames+0x1839a

// The version of flash, for reference:
0:004:x86> lmvm flash10a
start			 end				 module name
00000000`699e0000 00000000`69e55000   Flash10a   (export symbols)	   Flash10a.ocx
	Loaded symbol image file: Flash10a.ocx
	Image path: C:\Windows\SysWOW64\Macromed\Flash\Flash10a.ocx
	Image name: Flash10a.ocx
	Timestamp:		Sat Oct 04 23:16:05 2008 (48E83175)
	CheckSum:		 003AB626
	ImageSize:		00475000
	File version:	 10.0.12.36
	Product version:  10.0.12.36
	File flags:	   0 (Mask 3F)
	File OS:		  4 Unknown Win32
	File type:		2.0 Dll
	File date:		00000000.00000000
	Translations:	 0409.04b0
	CompanyName:	  Adobe Systems, Inc.
	ProductName:	  Shockwave Flash
	InternalName:	 Adobe Flash Player 10.0
	OriginalFilename: Flash.ocx
	ProductVersion:   10,0,12,36
	FileVersion:	  10,0,12,36
	FileDescription:  Adobe Flash Player 10.0 r12
	LegalCopyright:   Adobe® Flash® Player. Copyright © 1996-2008 Adobe Systems Incorporated. All Rights Reserved. Protected by U.S. Patent 6,879,327; Patents Pending in the United States and other countries. Adobe and Flash are either trademarks or registered trademarks in theҽﻯ
	LegalTrademarks:  Adobe Flash Player


Note that adobe flash is probably the biggest offender in IE crashes and hangs, so if you can live without it, disable it.

#18 User is offline   LuckMan212 

  • Group: Members
  • Posts: 9
  • Joined: 17-April 05

Posted 18 January 2009 - 09:26 PM

thanks cluberti, for your time- this is amazing! Of course I have some questions-
1) how do you know the main/UI thread is 'thread 3' - is thread 3 always the UI thread when debugging x86 on x64?
2) how did you figure out from the entry "03fef62c 774adcea ntdll_77af0000!NtWaitForMultipleObjects+0x15" that it means it is waiting for thread 4?
3) do multithreaded apps always pass control in a linear fashion? (i.e. if thread 3 is waiting, then it means thread 4 is executing??)
4) how do you know thread 4 is a `worker thread`?
5) when I open the dump files in x86 WinDbg on my system, the 'k' command yields the following:
 
0:000> k
Child-SP          RetAddr           Call Site
00000000`000ceb08 00000000`75c4ab46 wow64cpu!WaitForMultipleObjects32+0x3a
00000000`000cebb0 00000000`75c4a14c wow64!RunCpuSimulation+0xa
00000000`000cebe0 00000000`779852d3 wow64!Wow64LdrpInitialize+0x4b4
00000000`000cf140 00000000`77985363 ntdll!LdrpInitializeProcess+0x14ac
00000000`000cf3f0 00000000`779785ce ntdll! ?? ::FNODOBFM::`string'+0x1ff19
00000000`000cf4a0 00000000`00000000 ntdll!LdrInitializeThunk+0xe 

What do you think the ntdll ?? ::FNODOBFM:: line is? That line doesn't appear when debugging in the x64 version.
sorry for so many questions, I am just trying to understand how you were able to figure this out!

#19 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 10,936
  • Joined: 09-September 01
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 18 January 2009 - 10:15 PM

1 - Experience, and no.
2 - I know how IE works - looking at the other threads (actually, specifically thread 4) let me know that there was a worker thread, meaning someone had to spawn it (and from what it was doing, this would have been done as the result of a browse event meaning it comes from thread "0" (again, experience)
3 - No
4 - because it's doing work :P
5 - This is the x86 side of the wow64 CPU thread - you can't see what it's doing without private (internal) symbols, but rest assured this is normal

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2011 msfn.org
Privacy Policy