如何调试win2003系统死锁鼠标能动
Windows内核调试
如何调试win2003系统死锁鼠标能动
willingbug
2011-04-25, 16:36 下午
我的机器为win2003系统大约每隔五小时后就会死锁，但鼠标能动，CPU，内存均不高。就是不能启动新的进程。不知如何下手调试。
Re: 如何调试win2003系统死锁鼠标能动
格蠹老雷
2011-04-26, 10:25 上午
强制蓝屏产生DUMP，或者双机内核调试
Re: 如何调试win2003系统死锁鼠标能动
willingbug
2011-04-26, 17:13 下午
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\SamllBug\Desktop\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available
WARNING: Path element is empty
Symbol search path is: SRV*C:\Windows_Symbols\sym*http://msdl.microsoft.com/download/symbols;C:\Windows_Symbols\Windows_Win7.7600.16385.090713-1255.X64FRE.Symbols;C:\Windows_Symbols\Windows_Win7.7600.16385.090713-1255.X86FRE.Symbols;C:\Windows_Symbols\WindowsXP-KB835935-SP2-slp-Symbols;C:\Windows_Symbols\WindowsXP-KB936929-SP3-x86-DEBUG-symbols-full-ENU-DEBUG;C:\Windows_Symbols\WindowsXP-KB936929-SP3-x86-symbols-full-ENU;C:\Windows_Symbols\Windows_Win7.7600.16385.090713-1255.X86CHK.Symbols;C:\Windows_Symbols\Windows2003.x86.fre.rtm.symbols;C:\Windows_Symbols\Windows2003_sp1.x86.fre.rtm.symbols;C:\Windows_Symbols\WindowsServer2003-KB933548-v1-x86-symbols-NRL-ENU;C:\Windows_Symbols\sym;C:\Windows_Symbols\w2ksp4sym_cn;;C:\Windows_Symbols\Windows_Win7.7600.16399.090713-1255.X86CHK.Symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.101019-0340
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Tue Apr 26 15:10:38.796 2011 (GMT+8)
System Uptime: 0 days 1:25:51.484
Loading Kernel Symbols
...............................................................
...............................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck E2, {0, 0, 0, 0}
Probably caused by : i8042prt.sys ( i8042prt!I8xProcessCrashDump+256 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MANUALLY_INITIATED_CRASH (e2)
The user manually initiated this crash dump.
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: MANUALLY_INITIATED_CRASH
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: Idle
CURRENT_IRQL: a
LAST_CONTROL_TRANSFER: from ba8f2532 to 80827c83
STACK_TEXT:
8089a4d4 ba8f2532 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1b
8089a504 ba8f1d2c 00d7d0d8 ee7898c6 00000000 i8042prt!I8xProcessCrashDump+0x256
8089a54c 8088d909 89bbb308 89d7d020 0001000a i8042prt!I8042KeyboardInterruptService+0x225
8089a54c f7669ca2 89bbb308 89d7d020 0001000a nt!KiInterruptDispatch+0x49
8089a600 8088de72 00000000 0000000e 00000000 intelppm!AcpiC1Idle+0x12
8089a604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xa
STACK_COMMAND: kb
FOLLOWUP_IP:
i8042prt!I8xProcessCrashDump+256
ba8f2532 83fe01 cmp esi,1
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: i8042prt!I8xProcessCrashDump+256
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: i8042prt
IMAGE_NAME: i8042prt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a110
FAILURE_BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+256
BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+256
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MANUALLY_INITIATED_CRASH (e2)
The user manually initiated this crash dump.
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: MANUALLY_INITIATED_CRASH
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: Idle
CURRENT_IRQL: a
LAST_CONTROL_TRANSFER: from ba8f2532 to 80827c83
STACK_TEXT:
8089a4d4 ba8f2532 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1b
8089a504 ba8f1d2c 00d7d0d8 ee7898c6 00000000 i8042prt!I8xProcessCrashDump+0x256
8089a54c 8088d909 89bbb308 89d7d020 0001000a i8042prt!I8042KeyboardInterruptService+0x225
8089a54c f7669ca2 89bbb308 89d7d020 0001000a nt!KiInterruptDispatch+0x49
8089a600 8088de72 00000000 0000000e 00000000 intelppm!AcpiC1Idle+0x12
8089a604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xa
STACK_COMMAND: kb
FOLLOWUP_IP:
i8042prt!I8xProcessCrashDump+256
ba8f2532 83fe01 cmp esi,1
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: i8042prt!I8xProcessCrashDump+256
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: i8042prt
IMAGE_NAME: i8042prt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45d6a110
FAILURE_BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+256
BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+256
Followup: MachineOwner
---------
0: kd> kvn
# ChildEBP RetAddr Args to Child
00 8089a4d4 ba8f2532 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1b (FPO: [5,0,0])
01 8089a504 ba8f1d2c 00d7d0d8 ee7898c6 00000000 i8042prt!I8xProcessCrashDump+0x256 (FPO: [3,2,4])
02 8089a54c 8088d909 89bbb308 89d7d020 0001000a i8042prt!I8042KeyboardInterruptService+0x225 (FPO: [SEH])
03 8089a54c f7669ca2 89bbb308 89d7d020 0001000a nt!KiInterruptDispatch+0x49 (FPO: [0,2] TrapFrame @ 8089a570)
04 8089a600 8088de72 00000000 0000000e 00000000 intelppm!AcpiC1Idle+0x12 (FPO: [0,2,0])
05 8089a604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xa (FPO: [0,0,0])
0: kd> .process
Implicit process is now 8089db40
0: kd> !pcr
KPCR for Processor 0 at ffdff000:
Major 1 Minor 1
NtTib.ExceptionList: 8089a53c
NtTib.StackBase: 00000000
NtTib.StackLimit: 00000000
NtTib.SubSystemTib: 80042000
NtTib.Version: 001db344
NtTib.UserPointer: 00000001
NtTib.SelfTib: 00000000
SelfPcr: ffdff000
Prcb: ffdff120
Irql: 0000001f
IRR: 00000000
IDR: ffffffff
InterruptMode: 00000000
IDT: 8003f400
GDT: 8003f000
TSS: 80042000
CurrentThread: 8089d8c0
NextThread: 00000000
IdleThread: 8089d8c0
DpcQueue:
0: kd> lm
start end module name
80800000 80a5a000 nt (pdb symbols) c:\windows_symbols\sym\ntkrpamp.pdb\B30640A84F1046C880BA546891EC17211\ntkrpamp.pdb
80a5a000 80a86000 hal (pdb symbols) c:\windows_symbols\sym\halmacpi.pdb\F799635F9A7C45BDBF439633754B99B61\halmacpi.pdb
b92da000 b92ed000 sysaudio (deferred)
b92ed000 b9308000 wdmaud (deferred)
b9470000 b949b000 RDPWD (deferred)
b967b000 b96df000 srv (deferred)
b9707000 b9731000 Fastfat (deferred)
b9731000 b97da600 hardlock (deferred)
b9803000 b98d2b80 vmx86 (deferred)
b997b000 b997dd00 vstor2 (deferred)
b99fb000 b9a06000 TDTCP (deferred)
b9a2b000 b9a35000 hcmon (deferred)
b9a6b000 b9a76c80 vmci (deferred)
b9c1b000 b9c38000 dump_atapi (deferred)
b9c38000 b9c4d000 Cdfs (deferred)
b9c55000 b9c57f00 VMNET (deferred)
b9c75000 b9c86000 Fips (deferred)
b9c86000 b9cfc000 mrxsmb (deferred)
b9d24000 b9d54000 rdbss (deferred)
b9d54000 b9d7e000 ipnat (deferred)
b9d7e000 b9da8000 afd (deferred)
b9da8000 b9dd9000 netbt (deferred)
b9dd9000 b9e6f000 tcpip (deferred)
b9e6f000 b9e92780 360netmon (deferred)
b9e93000 b9e9d000 ndisuio (deferred)
b9ec3000 b9ecea00 Haspnt (deferred)
b9f33000 b9f4c000 ipsec (deferred)
b9fc4000 b9fd9000 usbhub (deferred)
ba001000 ba016000 drmk (deferred)
ba016000 ba03f000 portcls (deferred)
ba03f000 ba650000 RtkHDAud (deferred)
ba6bb000 ba705000 update (deferred)
ba72d000 ba764000 rdpdr (deferred)
ba764000 ba7be000 wlbs (deferred)
ba7be000 ba7d0000 raspptp (deferred)
ba7f0000 ba7fa000 Dxapi (deferred)
ba810000 ba819000 dump_WMILIB (deferred)
ba840000 ba84d000 wanarp (deferred)
ba850000 ba85d000 netbios (deferred)
ba860000 ba86e000 msgpc (deferred)
ba870000 ba889000 ndiswan (deferred)
ba889000 ba89d000 rasl2tp (deferred)
ba89d000 ba8c4000 ks (deferred)
ba8c4000 ba8d7000 redbook (deferred)
ba8d7000 ba8ef000 cdrom (deferred)
ba8ef000 ba901000 i8042prt (pdb symbols) c:\windows_symbols\sym\i8042prt.pdb\C7B9D60ABE354B818FB41CFDF01BADCF2\i8042prt.pdb
ba901000 ba919000 parport (deferred)
ba919000 ba92c000 serial (deferred)
ba92c000 ba956000 USBPORT (deferred)
ba956000 ba96ff80 Rtenicxp (deferred)
ba970000 ba995000 HDAudBus (deferred)
ba995000 ba9b1000 VIDEOPRT (deferred)
bf800000 bf9d3000 win32k (deferred)
bf9d3000 bf9ea000 dxg (deferred)
bff70000 bff78000 framebuf (deferred)
f7209000 f7248000 NDIS (deferred)
f7248000 f726e000 KSecDD (deferred)
f726e000 f7293000 fltMgr (deferred)
f7293000 f72a6000 CLASSPNP (deferred)
f72a6000 f72c3000 atapi (deferred)
f72c3000 f72ec000 volsnap (deferred)
f72ec000 f7317000 dmio (deferred)
f7317000 f733d000 ftdisk (deferred)
f733d000 f7352000 pci (deferred)
f7352000 f7386000 ACPI (deferred)
f7487000 f7490000 WMILIB (deferred)
f7497000 f74a6000 isapnp (deferred)
f74a7000 f74b4000 PCIIDEX (deferred)
f74b7000 f74c7000 MountMgr (deferred)
f74c7000 f74d2000 PartMgr (deferred)
f74d7000 f74e7000 disk (deferred)
f74e7000 f74f3000 Dfs (deferred)
f74f7000 f7501000 crcdisk (deferred)
f7517000 f7520000 mssmbios (deferred)
f7527000 f7534000 Npfs (deferred)
f7557000 f7562000 ptilink (deferred)
f7587000 f7590000 Fs_Rec (deferred)
f75a7000 f75b0000 raspti (deferred)
f75b7000 f75c2000 Msfs (deferred)
f75c7000 f75d2000 kbdclass (deferred)
f75d7000 f75e6000 raspppoe (deferred)
f75f7000 f7603000 vgapnp (deferred)
f7607000 f7612000 TDI (deferred)
f7617000 f7625000 NDProxy (deferred)
f7627000 f7631000 serenum (deferred)
f7657000 f7660000 ndistapi (deferred)
f7667000 f7676000 intelppm (pdb symbols) c:\windows_symbols\windowsserver2003-kb933548-v1-x86-symbols-nrl-enu\sys\intelppm.pdb
f7677000 f7686000 termdd (deferred)
f7687000 f7691000 mouclass (deferred)
f76a7000 f76b0000 watchdog (deferred)
f76e8000 f7707000 Mup (deferred)
f7707000 f770f000 kdcom (deferred)
f770f000 f7717000 BOOTVID (deferred)
f7717000 f771e000 pciide (deferred)
f771f000 f7726000 dmload (deferred)
f7757000 f775d000 vmnetbridge (deferred)
f776f000 f7776000 parvdm (deferred)
f777f000 f7784180 usbuhci (deferred)
f7787000 f778db80 usbehci (deferred)
f778f000 f7797000 fsvga (deferred)
f7797000 f779f000 audstub (deferred)
f77b7000 f77bbc80 vmnetuserif (deferred)
f77cf000 f77d6000 Null (deferred)
f77d7000 f77de000 Beep (deferred)
f77df000 f77e7000 mnmdd (deferred)
f77e7000 f77ef000 RDPCDD (deferred)
f77ef000 f77f7000 rasacd (deferred)
f77ff000 f7806000 dxgthk (deferred)
f7993000 f7994280 swenum (deferred)
f79bd000 f79be580 USBD (deferred)
f7b4a000 f7bdf000 Ntfs (deferred)
Unloaded modules:
b925c000 b928c000 kmixer.sys
b9f54000 b9f5c000 drmkaud.sys
b928c000 b929e000 DMusic.sys
b929e000 b92b2000 swmidi.sys
b92b2000 b92da000 aec.sys
f79a5000 f79a7000 splitter.sys
b9f94000 b9f9a000 01.tmp
ba830000 ba83e000 imapi.sys
f7637000 f7643000 vga.sys
f77c7000 f77cf000 Sfloppy.SYS
f7567000 f7571000 Flpydisk.SYS
f7537000 f7542000 Fdc.SYS
这是我的DUMP的信息，一插网线隔个几个小时就机器除了鼠标可以动，已经启动的进程是活动的外，就再不能启动新的进程了。
Re: 如何调试win2003系统死锁鼠标能动
格蠹老雷
2011-04-27, 13:08 下午
自动分析对手工产生的蓝屏帮助很小
!process 0 0 csrss.exe
找到EPROCESS地址后，!process
同时尝试!locks观察可能的死锁...
看了一天还是没看出头绪，请大侠帮忙
willingbug
2011-04-28, 16:36 下午
0: kd> !stacks 2
Proc.Thread .Thread Ticks ThreadState Blocker
[89f889e8 System]
4.000008 89f88710 00000d6 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!MmZeroPageThread+0xd1
nt!Phase1Initialization+0x12
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000010 89f86db0 00507d3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000014 89f86b40 0004076 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000018 89f868d0 00003ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00001c 89f86660 0050290 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000020 89f863f0 00014ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000024 89f86180 0016c4b Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000028 89f85020 004fe93 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00002c 89f85db0 00021f6 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000030 89f85b40 000000d Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000034 89f858d0 000002b Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000038 89f85660 00507d3 Blocked Stack paged out
4.00003c 89f853f0 00507d3 Blocked Stack paged out
4.000040 89f84020 004179c Blocked Stack paged out
4.000044 89f84db0 004664a Blocked Stack paged out
4.000048 89f84b40 0046649 Blocked Stack paged out
4.00004c 89f848d0 0000648 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000050 89f84660 000000d Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000054 89f843f0 00000d6 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000058 89f83020 000000e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ExpWorkerThreadBalanceManager+0x5e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00005c 89f82738 0043021 Blocked Stack paged out
4.000060 89f824c8 0000dc7 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!MiModifiedPageWriterWorker+0x45
nt!MiModifiedPageWriter+0x179
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000064 89f793d8 0011bcf Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!MiMappedPageWriter+0x4d
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000068 89f7a020 000000f Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!KeBalanceSetManager+0xad
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00006c 89f7adb0 00000a3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!KeSwapProcessOrStack+0x2b
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000070 89f7f020 003fab2 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!FsRtlWorkerThread+0x35
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000074 89f7fdb0 00507cd Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!FsRtlWorkerThread+0x35
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000078 89f816e0 005028f Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
ACPI!ACPIWorker+0x47
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00007c 89f98680 00507b1 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
dmio!voliod_loop+0x399
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000080 89ee1020 004621c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
NDIS!ndisWorkerThread+0x2f
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000088 89d60120 0050365 Blocked Stack paged out
4.000098 89d8b1f0 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00009c 89dc5440 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000a0 89dfe730 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000a4 89dfe4c0 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000a8 89dfe250 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000ac 89dccdb0 00506c0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000b0 89dccb40 00218f3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdpdr!RxpWorkerThreadDispatcher+0x4b
rdpdr!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000b4 89dcc8d0 0000bc0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
rdpdr!RxSpinUpRequestsDispatcher+0x58
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000d0 89c844a8 0050090 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
raspptp!MainPassiveLevelThread+0x6e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000e0 89c9f020 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000e4 89e066d0 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000e8 89c36db0 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000ec 89c16690 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000f0 89c58110 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000f4 89c72118 0050509 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000f8 89ca0840 0050508 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x110e
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0000fc 89c5dad0 0000006 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x54d6bb
RtkHDAud+0x80b3
RtkHDAud+0x2c3ba4
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000100 89c5ca80 0046646 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x66199
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000104 89c6f4c0 0046450 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
RtkHDAud+0x60fab
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000108 89d4d6f0 0050146 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
USBPORT!USBPORT_WorkerThread+0x3c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00010c 89cc6960 005013e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
USBPORT!USBPORT_WorkerThread+0x3c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000110 89bc8a30 0000003 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
USBPORT!USBPORT_WorkerThread+0x3c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000114 89de56f8 005012e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
USBPORT!USBPORT_WorkerThread+0x3c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000118 89af5db0 005012c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
USBPORT!USBPORT_WorkerThread+0x3c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00011c 89c7a960 000011d Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
parport!P5FdoThread+0x53
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000124 89cbe960 005008e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
rasacd!AcdNotificationRequestThread+0xe2
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000130 89201538 00218f3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000134 89201898 005038c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000138 891fadb0 005038c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00013c 891faa50 0000297 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000140 89415ae0 0000297 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000144 891fa5c8 0021ce0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000148 89def688 001210b Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
rdbss!RxpWorkerThreadDispatcher+0x4b
rdbss!RxBootstrapWorkerThreadDispatcher+0xf
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00014c 89de88d8 000088c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
rdbss!RxSpinUpRequestsDispatcher+0x58
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000150 89de0150 000aa3d Blocked Stack paged out
4.000378 89b6d9c8 00003ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!ExpWorkerThread+0xc8
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0003f4 89aee710 00501f3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
vmx86+0x307f
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000434 89b2c8d0 00501ef Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
hardlock+0x3738a
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000468 89c93b68 005014c Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
hcmon+0x2a93
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000494 89b7e208 000aa49 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
srv!WorkerThread+0x7c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.000498 89b67b68 000acda Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
srv!WorkerThread+0x7c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.00049c 8919cdb0 000a767 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
srv!WorkerThread+0x7c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
4.0004a0 8917bdb0 0050138 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
srv!WorkerThread+0x7c
nt!PspSystemThreadStartup+0x2e
nt!KiThreadStartup+0x16
[89bc4128 smss.exe]
154.000158 89bee150 0050308 Blocked Stack paged out
154.00015c 89cc7960 005005c Blocked Stack paged out
154.000160 89bdb250 005005e Blocked Stack paged out
[89d63d88 csrss.exe]
184.00018c 89e580b8 0046654 Blocked Stack paged out
184.000190 89d5b220 004664d Blocked Stack paged out
184.000194 89d86b20 000030e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!NtReplyWaitReceivePort+0x18
nt!KiFastCallEntry+0xfc
+0x7c95847c
184.000198 89d9fdb0 0050308 Blocked Stack paged out
184.0001a4 89de3150 00000d6 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!NtReplyWaitReceivePort+0x18
nt!KiFastCallEntry+0xfc
+0x7c95847c
184.0001a8 89de2150 0000000 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
win32k!RawInputThread+0x4e0
win32k!xxxCreateSystemThreads+0x60
win32k!NtUserCallOneParam+0x23
nt!KiFastCallEntry+0xfc
+0x7c95847c
184.0001ac 89de4150 0000004 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
win32k!xxxMsgWaitForMultipleObjects+0xc5
win32k!xxxDesktopThread+0x346
win32k!xxxCreateSystemThreads+0x6a
win32k!NtUserCallOneParam+0x23
nt!KiFastCallEntry+0xfc
+0x7c95847c
184.0001d8 89d69178 00502eb Blocked Stack paged out
184.000214 89b31710 0000954 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!NtReplyWaitReceivePort+0x18
nt!KiFastCallEntry+0xfc
+0x7c95847c
184.000760 89b32190 0046654 Blocked Stack paged out
184.0007d8 891a7238 000001f Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealInternalGetMessage+0x46a
win32k!NtUserGetMessage+0x3f
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89b04d88 winlogon.exe]
19c.0001a0 89be6db0 00004c1 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealWaitMessageEx+0x12
win32k!NtUserWaitMessage+0x14
nt!KiFastCallEntry+0xfc
+0x7c95847c
19c.0001c0 89bd9128 0046648 Blocked Stack paged out
19c.0001c8 89bcf570 00182db Blocked Stack paged out
19c.0001d4 89baf178 004664c Blocked Stack paged out
19c.000248 89b05db0 005008f Blocked Stack paged out
19c.000250 89b70db0 00460b3 Blocked Stack paged out
19c.000254 89bb16c8 00502b4 Blocked Stack paged out
19c.0003d0 89b53c10 004664d Blocked Stack paged out
19c.0003d4 89afd710 005023f Blocked Stack paged out
19c.0003d8 89b053d0 0050009 Blocked Stack paged out
19c.0003dc 89b69c10 005023f Blocked Stack paged out
19c.0006ec 88eb2db0 0047472 Blocked Stack paged out
19c.0006f4 88e62ab8 003ee47 Blocked Stack paged out
19c.00076c 89af7db0 004664d Blocked Stack paged out
19c.0007d0 8918a760 0000646 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
19c.0007e4 88e8ea70 0046647 Blocked Stack paged out
19c.00008c 8937c518 003c49a Blocked Stack paged out
19c.0002c8 88e54c78 0040131 Blocked Stack paged out
19c.000714 89179b40 0043c5b Blocked Stack paged out
19c.0006f0 89b186f8 003ee48 Blocked Stack paged out
[89d661a0 services.exe]
1cc.0001dc 89bb5178 0007f89 Blocked Stack paged out
1cc.0001e0 89b00db0 0000772 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
1cc.0001e4 89dde150 0000789 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
1cc.000268 89c85db0 0000789 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
1cc.000270 89b7d648 00146f8 Blocked Stack paged out
1cc.000278 89dbcdb0 00502a3 Blocked Stack paged out
1cc.000294 89b7f6f0 004664b Blocked Stack paged out
1cc.0002c0 89db84b0 004fc3f Blocked Stack paged out
1cc.0002e8 89bb06c8 0000fb6 Blocked Stack paged out
1cc.0002ec 89db0db0 0000ad8 Blocked Stack paged out
1cc.000308 89d6e9c0 0016bff Blocked Stack paged out
1cc.00030c 89d6e4c0 00462fd Blocked Stack paged out
1cc.000450 89d9d380 0000264 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
1cc.0006dc 88e636b0 004e9af Blocked Stack paged out
1cc.0006e0 88e66448 004e9a9 Blocked Stack paged out
1cc.000568 88e68b40 0040078 Blocked Stack paged out
[89bb0150 lsass.exe]
1f0.0001f8 89b40db0 005014c Blocked Stack paged out
1f0.0001fc 89d60460 00012a8 Blocked Stack paged out
1f0.000204 89d5bc00 0016add Blocked Stack paged out
1f0.000208 89d6a1f0 000a767 Blocked Stack paged out
1f0.00020c 89b173d0 000a767 Blocked Stack paged out
1f0.000210 89bb62a0 000029e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
1f0.000228 89d6f988 00008bc Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
1f0.000230 89b8f860 0048ad5 Blocked Stack paged out
1f0.000234 89bb7b80 000a767 Blocked Stack paged out
1f0.000238 89c8ddb0 000a767 Blocked Stack paged out
1f0.00023c 89bb67f0 00502d5 Blocked Stack paged out
1f0.000240 89de06a0 00403f2 Blocked Stack paged out
1f0.000244 89d7a508 0000264 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
1f0.00025c 89d73db0 0048aa6 Blocked Stack paged out
1f0.000260 89db3bf0 000aa3d Blocked Stack paged out
1f0.00027c 89b7edb0 0040114 Blocked Stack paged out
1f0.000648 88e6cdb0 00008a8 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89b6c6c8 svchost.exe]
288.00028c 89c8f6f0 00502a2 Blocked Stack paged out
288.00029c 89b8d4b8 00502a0 Blocked Stack paged out
288.0002a0 89b8da08 00002a0 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
288.0002a4 89baea30 00502a0 Blocked Stack paged out
288.0002a8 89db7508 004884e Blocked Stack paged out
[89b24888 svchost.exe]
2cc.0002d0 89b37db0 0050286 Blocked Stack paged out
2cc.0002d4 89de51f8 0000b59 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
2cc.0002dc 89b47308 0046b8e Blocked Stack paged out
2cc.0002e0 89d5e5f8 000018e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
2cc.0002e4 89b484b0 005018e Blocked Stack paged out
2cc.0002f8 89b45810 00000ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
2cc.000484 89b29db0 00009e7 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
2cc.000678 89ce2578 003c86a Blocked Stack paged out
2cc.000338 88e63db0 0000875 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89da1498 svchost.exe]
318.00031c 89d78b58 0050277 Blocked Stack paged out
318.000320 89d6cb58 0050277 Blocked Stack paged out
318.000330 89de6b58 005008f Blocked Stack paged out
318.000334 89d619c0 004faf7 Blocked Stack paged out
318.00033c 89d83700 005024e Blocked Stack paged out
318.000340 89d65200 0048a77 Blocked Stack paged out
318.000314 89b5b210 00000bc Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
318.000180 89ce1318 000047d Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89d79b30 svchost.exe]
328.00036c 89d738c0 0001723 Blocked Stack paged out
[89c624a8 spoolsv.exe]
3ac.0003b8 89b599d0 0050246 Blocked Stack paged out
3ac.0003bc 89c92b68 0050246 Blocked Stack paged out
3ac.0003c8 89b62c10 0050246 Blocked Stack paged out
3ac.0005f8 89b01458 005002f Blocked Stack paged out
3ac.000600 89b504a0 0050031 Blocked Stack paged out
3ac.000608 89b535c0 0000530 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
3ac.00060c 89af3a30 0000030 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
3ac.000610 89af37a0 0050030 Blocked Stack paged out
3ac.000614 89b407a0 0050030 Blocked Stack paged out
3ac.000618 89deadb0 0011ddb Blocked Stack paged out
3ac.00061c 89af3db0 005002f Blocked Stack paged out
3ac.0003c4 88e58358 0010a2e Blocked Stack paged out
[89b36568 svchost.exe]
414.000418 89d874d0 0050137 Blocked Stack paged out
414.000420 89b07210 0050155 Blocked Stack paged out
414.0004b8 88efcdb0 0023114 Blocked Stack paged out
414.0004bc 88efadb0 0050136 Blocked Stack paged out
414.0004c0 88ef9db0 0050136 Blocked Stack paged out
414.0004c8 88ef7db0 000fd33 Blocked Stack paged out
414.0004cc 88ef6db0 0000333 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
414.0004d0 88ef5db0 0025e14 Blocked Stack paged out
414.000670 89dee488 0048936 Blocked Stack paged out
[88ebbd88 alg.exe]
510.000514 88ebadb0 00500a4 Blocked Stack paged out
510.00051c 88eb5db0 004620e Blocked Stack paged out
510.000520 88eb3db0 0001723 Blocked Stack paged out
510.000528 88eb1db0 00000a3 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
510.00052c 88eb0db0 00500a0 Blocked Stack paged out
510.000530 88eaedb0 000009e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
[88ec2d88 svchost.exe]
534.000538 88ea4db0 0050095 Blocked Stack paged out
534.000544 89cd2020 0000375 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
534.000548 89c91020 0000595 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
534.00054c 89b123c8 004d395 Blocked Stack paged out
534.000550 89c8d3d0 00000a4 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
534.000554 89b5a3d0 0050094 Blocked Stack paged out
534.000558 89b6f020 0000874 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
534.00055c 89b62020 0048675 Blocked Stack paged out
534.000570 89b563d0 0050092 Blocked Stack paged out
534.000574 89b18020 003c49a Blocked Stack paged out
534.000578 89b283d0 0050090 Blocked Stack paged out
534.00057c 89b2c3d0 004fe75 Blocked Stack paged out
534.000580 89b43308 0050090 Blocked Stack paged out
534.000584 89b243d0 003c49a Blocked Stack paged out
534.000674 88f03db0 0048892 Blocked Stack paged out
534.00017c 88e6d7c0 00000a5 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89b36d88 svchost.exe]
5a8.0005ac 88f00db0 005005f Blocked Stack paged out
5a8.0005b8 89bc7a30 0046654 Blocked Stack paged out
5a8.0005bc 89aef9d0 004885c Blocked Stack paged out
5a8.0005c0 89af8c10 005005b Blocked Stack paged out
5a8.0005c4 89af89a0 005005b Blocked Stack paged out
5a8.0005c8 89b32880 0046654 Blocked Stack paged out
5a8.0005cc 89b1f390 005005c Blocked Stack paged out
5a8.0005d0 891f8890 005005c Blocked Stack paged out
5a8.0005d4 891f8620 005005b Blocked Stack paged out
5a8.0005dc 891fbb40 003631a Blocked Stack paged out
5a8.0005e0 89b47b48 005005c Blocked Stack paged out
5a8.0005e4 89b14db0 004f8dc Blocked Stack paged out
5a8.0005e8 89b12b70 0000654 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
5a8.0005f0 89d8fd08 004feef Blocked Stack paged out
5a8.00062c 89d92b70 005002f Blocked Stack paged out
5a8.000634 89bf59d0 005002f Blocked Stack paged out
5a8.000638 89bf5760 005002f Blocked Stack paged out
5a8.00067c 89be5478 004d35c Blocked Stack paged out
[88e77d88 wmiprvse.exe]
6a4.0006a8 88e683a8 003c49a Blocked Stack paged out
6a4.0006b4 88e69370 00373be Blocked Stack paged out
6a4.0006bc 89e12280 0000112 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
6a4.0006d0 88e625d0 004e9b0 Blocked Stack paged out
[89c56cf0 explorer.exe]
90.000094 89c568c0 00004c1 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.0000d4 89ce2308 0000d48 Blocked Stack paged out
90.0000dc 89179db0 0000fb5 Blocked Stack paged out
90.000128 891798d0 00460a8 Blocked Stack paged out
90.000164 88e8d500 00009c1 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.000178 89c54a60 000143f Blocked Stack paged out
90.000428 89e074f0 0000004 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealInternalGetMessage+0x46a
win32k!NtUserGetMessage+0x3f
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.000274 89d83020 00461e6 Blocked Stack paged out
90.000680 8917fa30 0000ad7 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealWaitMessageEx+0x12
win32k!NtUserWaitMessage+0x14
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.000398 88dafdb0 00000ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.0002b4 89bb1178 0000017 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.0001c4 88ed1db0 0000875 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.0007e0 89c2cdb0 00000ab Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.000644 89d80020 000002b Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.000324 89cc4020 000154f Blocked Stack paged out
90.000774 89eeeb90 000053f Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
90.00078c 8919bb20 0000952 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtSecureConnectPort+0x6ce
nt!NtConnectPort+0x24
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89c2c8c8 ÞËFeiQ.exe]
174.000188 89c559a0 0000001 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealInternalGetMessage+0x46a
win32k!NtUserGetMessage+0x3f
nt!KiFastCallEntry+0xfc
+0x7c95847c
174.0003e8 89198600 0000ad7 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
174.0003f8 891a4020 00007f5 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
174.0004fc 891920b8 000030e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
174.0000c0 89b3fb90 0001890 Blocked Stack paged out
174.00077c 891b0d70 000030e Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
[891af738 360tray.exe]
264.0001f4 891b1db0 0000004 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealInternalGetMessage+0x46a
win32k!NtUserGetMessage+0x3f
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.000448 88e5a3c8 0009635 Blocked Stack paged out
264.000480 88e5c330 00463a8 Blocked Stack paged out
264.0001d0 891a2db0 0000f43 Blocked Stack paged out
264.0004a8 891a1db0 0000d5a Blocked Stack paged out
264.0004e4 88e59db0 000035a Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeRemoveQueue+0x417
nt!NtRemoveIoCompletion+0xdc
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.0004f4 89c2edb0 00000a9 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.0004b0 89e3adb0 0046342 Blocked Stack paged out
264.0005b4 89196888 0000ad7 Blocked Stack paged out
264.0005ec 88dab5f8 004632f Blocked Stack paged out
264.0005fc 88e59810 0046331 Blocked Stack paged out
264.000620 8917fca0 0000024 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.000630 88d425d0 0046274 Blocked Stack paged out
264.000624 88df14a8 0000c8d Blocked Stack paged out
264.0002ac 88deb398 0000017 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.0000d8 88deba30 0007afd Blocked Stack paged out
264.00050c 88d41668 00462f4 Blocked Stack paged out
264.000508 88d413f8 0000031 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.0002d8 88d36370 0000001 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.000298 88de2378 0000017 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtWaitForSingleObject+0x9a
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.0001b0 88d6edb0 0000004 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.00041c 88d6e548 0000000 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
win32k!xxxSleepThread+0x1be
win32k!xxxRealInternalGetMessage+0x46a
win32k!NtUserGetMessage+0x3f
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.000518 88db1598 0000004 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.00072c 891864f8 0000264 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.00056c 88de66b0 0000264 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForSingleObject+0x346
nt!NtReplyWaitReceivePortEx+0x521
nt!KiFastCallEntry+0xfc
+0x7c95847c
264.000738 89b44588 00009e7 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeDelayExecutionThread+0x2ab
nt!NtDelayExecution+0x84
nt!KiFastCallEntry+0xfc
+0x7c95847c
[891aea08 ctfmon.exe]
300.000304 8919a810 00000d6 Blocked nt!KiSwapContext+0x26
nt!KiSwapThread+0x2e5
nt!KeWaitForMultipleObjects+0x3d7
nt!ObpWaitForMultipleObjects+0x202
nt!NtWaitForMultipleObjects+0xc8
nt!KiFastCallEntry+0xfc
+0x7c95847c
[89dc4d88 cmd.exe]
170.00075c 88e58020 0001af4 Blocked Stack paged out
[89bb56c8 conime.exe]
694.00026c 89d83c00 0000ad7 Blocked Stack paged out
0: kd> !process 89d63d88
PROCESS 89d63d88 SessionId: 0 Cid: 0184 Peb: 7ffd4000 ParentCid: 0154
DirBase: 7f140060 ObjectTable: e1729b78 HandleCount: 336.
Image: csrss.exe
VadRoot 89b94d60 Vads 109 Clone 0 Private 431. Modified 2884. Locked 0.
DeviceMap e10018f0
Token e1a8db08
ElapsedTime 01:25:32.546
UserTime 00:00:00.281
KernelTime 00:00:00.781
QuotaPoolUsage[PagedPool] 136660
QuotaPoolUsage[NonPagedPool] 5336
Working Set Sizes (now,min,max) (219, 50, 345) (876KB, 200KB, 1380KB)
PeakWorkingSetSize 1931
VirtualSize 64 Mb
PeakVirtualSize 73 Mb
PageFaultCount 5391
MemoryPriority BACKGROUND
BasePriority 13
CommitCharge 640
THREAD 89e580b8 Cid 0184.018c Teb: 7ffde000 Win32Thread: e10509c0 WAIT: (Unknown) UserMode Non-Alertable
89e582a4 Semaphore Limit 0x1
Waiting for reply to LPC MessageId 00001313:
Current LPC port e10510d8
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 41355 Ticks: 288340 (0:01:15:05.312)
Context Switch Count 5 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.000
Start Address 0x7598e679
Stack Init b9573000 Current b9572c08 Base b9573000 Limit b9570000 Call 0
Priority 15 BasePriority 15 PriorityDecrement 0
Kernel stack not resident.
THREAD 89d5b220 Cid 0184.0190 Teb: 7ffdd000 Win32Thread: e1477898 WAIT: (Unknown) UserMode Alertable
89df02e8 SynchronizationEvent
89c90110 SynchronizationEvent
89df02b8 SynchronizationEvent
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 41362 Ticks: 288333 (0:01:15:05.203)
Context Switch Count 3 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.000
Start Address 0x7598e877
Stack Init f7577000 Current f7576900 Base f7577000 Limit f7574000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
Kernel stack not resident.
THREAD 89d86b20 Cid 0184.0194 Teb: 7ffdc000 Win32Thread: e156a9f0 WAIT: (Unknown) UserMode Non-Alertable
89c410a0 Semaphore Limit 0x7fffffff
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 328913 Ticks: 782 (0:00:00:12.218)
Context Switch Count 918 LargeStack
UserTime 00:00:00.078
KernelTime 00:00:00.046
Start Address 0x759548de
Stack Init ba7e0000 Current ba7dfbf4 Base ba7e0000 Limit ba7dd000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
ba7dfc0c 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
ba7dfc38 80829a82 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
ba7dfc80 809227b7 nt!KeWaitForSingleObject+0x346 (FPO: [5,13,4])
ba7dfd30 80922a9e nt!NtReplyWaitReceivePortEx+0x521 (FPO: [SEH])
ba7dfd4c 808897ec nt!NtReplyWaitReceivePort+0x18 (FPO: [4,0,0])
ba7dfd4c 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ba7dfd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
005afff4 00000000 0x7c95847c
THREAD 89d9fdb0 Cid 0184.0198 Teb: 7ffdb000 Win32Thread: 00000000 WAIT: (Unknown) UserMode Non-Alertable
89c220a0 Semaphore Limit 0x7fffffff
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 1239 Ticks: 328456 (0:01:25:32.125)
Context Switch Count 3
UserTime 00:00:00.000
KernelTime 00:00:00.000
Start Address 0x75953b6e
Stack Init baf4e000 Current baf4dbf4 Base baf4e000 Limit baf4b000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
Kernel stack not resident.
THREAD 89de3150 Cid 0184.01a4 Teb: 7ffda000 Win32Thread: e158ee00 WAIT: (Unknown) UserMode Non-Alertable
89c410a0 Semaphore Limit 0x7fffffff
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 329481 Ticks: 214 (0:00:00:03.343)
Context Switch Count 962 LargeStack
UserTime 00:00:00.062
KernelTime 00:00:00.078
Win32 Start Address 0x0000ca52
LPC Server thread working on message Id ca52
Start Address 0x759548de
Stack Init f76c7000 Current f76c6bf4 Base f76c7000 Limit f76c4000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
f76c6c0c 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
f76c6c38 80829a82 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
f76c6c80 809227b7 nt!KeWaitForSingleObject+0x346 (FPO: [5,13,4])
f76c6d30 80922a9e nt!NtReplyWaitReceivePortEx+0x521 (FPO: [SEH])
f76c6d4c 808897ec nt!NtReplyWaitReceivePort+0x18 (FPO: [4,0,0])
f76c6d4c 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f76c6d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0071fff4 00000000 0x7c95847c
THREAD 89de2150 Cid 0184.01a8 Teb: 7ffd9000 Win32Thread: e15bcc90 WAIT: (Unknown) KernelMode Alertable
89fea508 SynchronizationEvent
89e1a910 SynchronizationEvent
89fea4c0 NotificationTimer
89e20bf8 SynchronizationEvent
808acf60 NotificationEvent
89e1c8b0 SynchronizationEvent
89b3e130 SynchronizationTimer
IRP List:
89e3b008: (0006,01b4) Flags: 00000970 Mdl: 00000000
89d78008: (0006,0190) Flags: 00000970 Mdl: 00000000
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 329695 Ticks: 0
Context Switch Count 312317 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.031
Start Address 0x7598e96c
Stack Init f75a7000 Current f75a6a3c Base f75a7000 Limit f75a4000 Call 0
Priority 15 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
f75a6a54 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
f75a6a80 808294b9 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
f75a6ab4 bf815215 nt!KeWaitForMultipleObjects+0x3d7 (FPO: [8,8,4])
f75a6d30 bf86f7e1 win32k!RawInputThread+0x4e0 (FPO: [1,146,0])
f75a6d40 bf8985e2 win32k!xxxCreateSystemThreads+0x60 (FPO: [1,1,0])
f75a6d54 808897ec win32k!NtUserCallOneParam+0x23 (FPO: [2,0,0])
f75a6d54 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f75a6d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 0x7c95847c
THREAD 89de4150 Cid 0184.01ac Teb: 7ffd8000 Win32Thread: e15c9ea8 WAIT: (Unknown) UserMode Non-Alertable
89e1bc00 SynchronizationEvent
89db4150 SynchronizationEvent
89def208 SynchronizationEvent
IRP List:
89e3bae8: (0006,01b4) Flags: 00000970 Mdl: 00000000
89d84008: (0006,0190) Flags: 00000970 Mdl: 00000000
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 329691 Ticks: 4 (0:00:00:00.062)
Context Switch Count 89231 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.312
Start Address 0x7598e96c
Stack Init f7587000 Current f7586990 Base f7587000 Limit f7584000 Call 0
Priority 15 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
f75869a8 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
f75869d4 808294b9 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
f7586a08 bf8403e2 nt!KeWaitForMultipleObjects+0x3d7 (FPO: [8,8,4])
f7586a5c bf817b62 win32k!xxxMsgWaitForMultipleObjects+0xc5 (FPO: [SEH])
f7586d30 bf86f7eb win32k!xxxDesktopThread+0x346 (FPO: [1,172,4])
f7586d40 bf8985e2 win32k!xxxCreateSystemThreads+0x6a (FPO: [1,1,0])
f7586d54 808897ec win32k!NtUserCallOneParam+0x23 (FPO: [2,0,0])
f7586d54 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f7586d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 0x7c95847c
THREAD 89d69178 Cid 0184.01d8 Teb: 7ffd7000 Win32Thread: e15a46c8 WAIT: (Unknown) UserMode Non-Alertable
89d910b8 SynchronizationEvent
89b09228 SynchronizationEvent
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 1268 Ticks: 328427 (0:01:25:31.671)
Context Switch Count 3 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.000
Start Address 0x7598e96c
Stack Init f76a7000 Current f76a6990 Base f76a7000 Limit f76a4000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
Kernel stack not resident.
THREAD 89b31710 Cid 0184.0214 Teb: 7ffd6000 Win32Thread: e1b14008 WAIT: (Unknown) UserMode Non-Alertable
89c410a0 Semaphore Limit 0x7fffffff
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 327307 Ticks: 2388 (0:00:00:37.312)
Context Switch Count 924 LargeStack
UserTime 00:00:00.078
KernelTime 00:00:00.031
Start Address 0x759548de
Stack Init ba840000 Current ba83fbf4 Base ba840000 Limit ba83d000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
ba83fc0c 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
ba83fc38 80829a82 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
ba83fc80 809227b7 nt!KeWaitForSingleObject+0x346 (FPO: [5,13,4])
ba83fd30 80922a9e nt!NtReplyWaitReceivePortEx+0x521 (FPO: [SEH])
ba83fd4c 808897ec nt!NtReplyWaitReceivePort+0x18 (FPO: [4,0,0])
ba83fd4c 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ba83fd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0343fff4 00000000 0x7c95847c
THREAD 89b32190 Cid 0184.0760 Teb: 7ffd5000 Win32Thread: 00000000 WAIT: (Unknown) UserMode Non-Alertable
89bdc48c NotificationEvent
IRP List:
89d9d2c8: (0006,0094) Flags: 00000900 Mdl: 00000000
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 41355 Ticks: 288340 (0:01:15:05.312)
Context Switch Count 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Start Address 0x7598c879
Stack Init baf52000 Current baf51c60 Base baf52000 Limit baf4f000 Call 0
Priority 15 BasePriority 15 PriorityDecrement 0
Kernel stack not resident.
THREAD 891a7238 Cid 0184.07d8 Teb: 7ffd3000 Win32Thread: e14f0758 WAIT: (Unknown) UserMode Non-Alertable
89d525e0 SynchronizationEvent
Not impersonating
DeviceMap e10018f0
Owning Process 89d63d88 Image: csrss.exe
Attached Process N/A Image: N/A
Wait Start TickCount 329664 Ticks: 31 (0:00:00:00.484)
Context Switch Count 7990 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.093
Start Address 0x75981b18
Stack Init b905a000 Current b9059bac Base b905a000 Limit b9055000 Call 0
Priority 15 BasePriority 13 PriorityDecrement 0
ChildEBP RetAddr
b9059bc4 80833491 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
b9059bf0 80829a82 nt!KiSwapThread+0x2e5 (FPO: [0,7,0])
b9059c38 bf89a6e3 nt!KeWaitForSingleObject+0x346 (FPO: [5,13,4])
b9059c94 bf89aea6 win32k!xxxSleepThread+0x1be (FPO: [SEH])
b9059cec bf89cf42 win32k!xxxRealInternalGetMessage+0x46a (FPO: [SEH])
b9059d4c 808897ec win32k!NtUserGetMessage+0x3f (FPO: [SEH])
b9059d4c 7c95847c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b9059d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
007eff84 00000000 0x7c95847c