Это файл дампа. NET 1.1, поэтому нельзя использовать sosex или DebugDiag, а доступные SOS-команды более ограничены, чем обычно. У меня нет источника для приложения. Приложение работает как Windows служба имеет объект таймера, который выполняет обработку данных каждые 5 секунд. Примерно через 1 день работы он прекращает обработку данных без исключений, возникающих в журнале приложения. Некоторые WinDbg cmds не работают, потому что он говорит, что символы ntdll.dll недоступны, несмотря на то, что они, похоже, загружают find. Один из потоков ожидает объект \ KernelObjects \ LowMemoryCondition. Интересно, возможно ли это связано с проблемой. Также в! Threadpool таймеры установлены в 0, но должен быть таймер, который запускает событие. Вот текущий анализ, какие рекомендуемые следующие шаги, чтобы определить, почему приложение кажется в состоянии зависания?
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 14393 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
10.0.14393.2430 (rs1_release_inmarket_aim.180806-1810)
Machine Name:
Debug session time: Fri Mar 20 13:15:42.000 2020 (UTC + 11:00)
System Uptime: 20 days 9:56:32.552
Process Uptime: 1 days 3:33:38.000
...............................................
For analysis of this file, run !analyze -v
eax=00000000 ebx=0000030c ecx=00000000 edx=00000000 esi=00000000 edi=0000030c
eip=77e8ed8c esp=0019f368 ebp=0019f3d8 iopl=0 nv up ei pl nz na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!NtWaitForSingleObject+0xc:
77e8ed8c c20c00 ret 0Ch
||2:2:010> |
. 2 id: 2138 examine name: c:\service\AppName_n2.exe
||2:2:010> !peb
PEB at 00360000
error 3 InitTypeRead( nt!_PEB at 00360000)...
||2:2:010> !cs
Bad symbols for NTDLL (error 3). Aborting.
||2:2:010> !sym noisy
noisy mode - symbol prompts on
||2:2:010> .symfix C:\symbols
DBGHELP: Symbol Search Path: SRV*C:\symbols*https://msdl.microsoft.com/download/symbols
SYMSRV: BYINDEX: 0xE
C:\symbols*https://msdl.microsoft.com/download/symbols
wntdll.pdb
D870D66A94EA44EF8A4124640E0245F31
SYMSRV: UNC: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb - file not found
SYMSRV: UNC: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pd_ - file not found
SYMSRV: UNC: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\file.ptr - file not found
SYMSRV: HTTPGET: /download/symbols/wntdll.pdb/D870D66A94EA44EF8A4124640E0245F31/wntdll.pdb
SYMSRV: HttpQueryInfo: 801900c8 - HTTP_STATUS_OK
SYMSRV: wntdll.pdb from https://msdl.microsoft.com/download/symbols: 1765376 bytescopied
SYMSRV: PATH: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
SYMSRV: RESULT: 0x00000000
DBGHELP: ntdll - public symbols
C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
DBGHELP: Symbol Search Path: SRV*C:\symbols*https://msdl.microsoft.com/download/symbols
SYMSRV: BYINDEX: 0xF
C:\symbols*https://msdl.microsoft.com/download/symbols
wntdll.pdb
D870D66A94EA44EF8A4124640E0245F31
SYMSRV: PATH: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
SYMSRV: RESULT: 0x00000000
DBGHELP: ntdll - public symbols
C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
DBGHELP: Symbol Search Path: SRV*C:\symbols*https://msdl.microsoft.com/download/symbols
SYMSRV: BYINDEX: 0x10
C:\symbols*https://msdl.microsoft.com/download/symbols
wntdll.pdb
D870D66A94EA44EF8A4124640E0245F31
SYMSRV: PATH: C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
SYMSRV: RESULT: 0x00000000
DBGHELP: ntdll - public symbols
C:\symbols\wntdll.pdb\D870D66A94EA44EF8A4124640E0245F31\wntdll.pdb
0:000> ~*k
. 0 Id: 2138.fc Suspend: 0 Teb: 00363000 Unfrozen
# ChildEBP RetAddr
00 0019f364 77cd5e89 ntdll!NtWaitForSingleObject+0xc
01 0019f3d8 77cd5de2 KERNELBASE!WaitForSingleObjectEx+0x99
02 0019f3ec 7727b322 KERNELBASE!WaitForSingleObject+0x12
03 0019f4ac 7728cb71 sechost!ScSendResponseReceiveControls+0xe5
04 0019f55c 7727a0ac sechost!ScDispatcherLoop+0xd1
05 0019f598 030bb29a sechost!StartServiceCtrlDispatcherW+0x5c
WARNING: Frame IP not in any known module. Following frames may be wrong.
06 00000000 00000000 0x30bb29a
1 Id: 2138.2390 Suspend: 0 Teb: 00366000 Unfrozen
# ChildEBP RetAddr
00 0728fd50 77ce3560 ntdll!NtWaitForMultipleObjects+0xc
01 0728fee4 77ce3458 KERNELBASE!WaitForMultipleObjectsEx+0xf0
02 0728ff00 791d25d5 KERNELBASE!WaitForMultipleObjects+0x18
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0728ff68 791d254c mscorwks!CoInitializeCor+0x3d35
04 0728ff80 76ee62c4 mscorwks!CoInitializeCor+0x3cac
05 0728ff94 77e81e39 kernel32!BaseThreadInitThunk+0x24
06 0728ffdc 77e81e04 ntdll!__RtlUserThreadStart+0x2f
07 0728ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
2 Id: 2138.2334 Suspend: 0 Teb: 00369000 Unfrozen
# ChildEBP RetAddr
00 0946fd6c 77ce3560 ntdll!NtWaitForMultipleObjects+0xc
01 0946ff00 77ce3458 KERNELBASE!WaitForMultipleObjectsEx+0xf0
02 0946ff1c 79262a5f KERNELBASE!WaitForMultipleObjects+0x18
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0946ff3c 791bbea4 mscorwks!DllGetClassObjectInternal+0x2bd0c
04 0946ff80 76ee62c4 mscorwks!Ordinal77+0xbea4
05 0946ff94 77e81e39 kernel32!BaseThreadInitThunk+0x24
06 0946ffdc 77e81e04 ntdll!__RtlUserThreadStart+0x2f
07 0946ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
3 Id: 2138.2380 Suspend: 0 Teb: 0037b000 Unfrozen
# ChildEBP RetAddr
00 0a47f9b8 77ce3560 ntdll!NtWaitForMultipleObjects+0xc
01 0a47fb4c 792976dc KERNELBASE!WaitForMultipleObjectsEx+0xf0
WARNING: Stack unwind information not available. Following frames may be wrong.
02 0a47fb7c 79297c3d mscorwks!CorMarkThreadInThreadPool+0x2a50
03 0a47fbd0 793389ff mscorwks!CorMarkThreadInThreadPool+0x2fb1
04 0a47fc18 09b10740 mscorwks!ReleaseFusionInterfaces+0x9333f
05 0a47fc88 09cee68e 0x9b10740
06 0a47fca8 791da434 0x9cee68e
07 0a47fdb8 791da58a mscorwks!CoInitializeCor+0xbb94
08 0a47fe68 791da5f6 mscorwks!CoInitializeCor+0xbcea
09 0a47fe90 792e518c mscorwks!CoInitializeCor+0xbd56
0a 0a47fedc 792e525b mscorwks!ReleaseFusionInterfaces+0x3facc
0b 0a47ff80 76ee62c4 mscorwks!ReleaseFusionInterfaces+0x3fb9b
0c 0a47ff94 77e81e39 kernel32!BaseThreadInitThunk+0x24
0d 0a47ffdc 77e81e04 ntdll!__RtlUserThreadStart+0x2f
0e 0a47ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
4 Id: 2138.21c8 Suspend: 0 Teb: 0037e000 Unfrozen
# ChildEBP RetAddr
00 0a1efe7c 77ce462a ntdll!NtDelayExecution+0xc
01 0a1efee4 77ce458f KERNELBASE!SleepEx+0x8a
02 0a1efef4 792e9ebe KERNELBASE!Sleep+0xf
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0a1eff80 76ee62c4 mscorwks!ReleaseFusionInterfaces+0x447fe
04 0a1eff94 77e81e39 kernel32!BaseThreadInitThunk+0x24
05 0a1effdc 77e81e04 ntdll!__RtlUserThreadStart+0x2f
06 0a1effec 00000000 ntdll!_RtlUserThreadStart+0x1b
0:000> !runaway
User Mode Time
Thread Time
0:fc 0 days 0:00:00.406
4:21c8 0 days 0:00:00.093
3:2380 0 days 0:00:00.015
2:2334 0 days 0:00:00.000
1:2390 0 days 0:00:00.000
0:000> !locks
NTSDEXTS: invalid _LIST_ENTRY size 0
0:000> kv
# ChildEBP RetAddr Args to Child
00 0019f364 77cd5e89 0000030c 00000000 00000000 ntdll!NtWaitForSingleObject+0xc (FPO: [3,0,0])
01 0019f3d8 77cd5de2 0000030c ffffffff 00000000 KERNELBASE!WaitForSingleObjectEx+0x99 (FPO: [SEH])
02 0019f3ec 7727b322 0000030c ffffffff 40694160 KERNELBASE!WaitForSingleObject+0x12 (FPO: [Non-Fpo])
03 0019f4ac 7728cb71 00000000 000004d3 0000f7a0 sechost!ScSendResponseReceiveControls+0xe5 (FPO: [Non-Fpo])
04 0019f55c 7727a0ac 40694054 0019f90c 0019f5bc sechost!ScDispatcherLoop+0xd1 (FPO: [Non-Fpo])
05 0019f598 030bb29a 0300d688 00000000 0300d688 sechost!StartServiceCtrlDispatcherW+0x5c (FPO: [Non-Fpo])
WARNING: Frame IP not in any known module. Following frames may be wrong.
06 00000000 00000000 00000000 00000000 00000000 0x30bb29a
0:000> !handle 30c f
Handle 0000030c
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 65534
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:000> ~1s
eax=791d4d45 ebx=00000000 ecx=00000000 edx=00000000 esi=00000003 edi=00000003
eip=77e8f31c esp=0728fd54 ebp=0728fee4 iopl=0 nv up ei pl nz na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!NtWaitForMultipleObjects+0xc:
77e8f31c c21400 ret 14h
0:001> kv
# ChildEBP RetAddr Args to Child
00 0728fd50 77ce3560 00000003 0728ff24 00000001 ntdll!NtWaitForMultipleObjects+0xc (FPO: [5,0,0])
01 0728fee4 77ce3458 00000003 0728ff24 00000000 KERNELBASE!WaitForMultipleObjectsEx+0xf0 (FPO: [SEH])
02 0728ff00 791d25d5 00000003 0728ff24 00000000 KERNELBASE!WaitForMultipleObjects+0x18 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0728ff68 791d254c 00000000 791d4d45 791d4d45 mscorwks!CoInitializeCor+0x3d35
etc
0:001> dd 0728ff24
0728ff24 000001cc 000001d4 000001c4 00000000
etc
0:001> !handle 000001cc f
Handle 000001cc
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 65538
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:001> !handle 1d4 f
Handle 000001d4
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 65538
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:001> !handle 1c4 f
Handle 000001c4
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 65538
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:001> ~2s
eax=00000001 ebx=00000000 ecx=00000000 edx=00000000 esi=00000002 edi=00000002
eip=77e8f31c esp=0946fd70 ebp=0946ff00 iopl=0 nv up ei pl nz ac po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000212
ntdll!NtWaitForMultipleObjects+0xc:
77e8f31c c21400 ret 14h
0:002> kv
# ChildEBP RetAddr Args to Child
00 0946fd6c 77ce3560 00000002 793dcc58 00000001 ntdll!NtWaitForMultipleObjects+0xc (FPO: [5,0,0])
01 0946ff00 77ce3458 00000002 793dcc58 00000000 KERNELBASE!WaitForMultipleObjectsEx+0xf0 (FPO: [SEH])
02 0946ff1c 79262a5f 00000002 793dcc58 00000000 KERNELBASE!WaitForMultipleObjects+0x18 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0946ff3c 791bbea4 00000224 791d0020 791d0020 mscorwks!DllGetClassObjectInternal+0x2bd0c
etc
0:002> dd 793dcc58
793dcc58 00000218 00000224 0000021c 00000000
etc
0:002> !handle 218 f
Handle 00000218
Type Event
Attributes 0x10
GrantedAccess 0x100001:
Synch
QueryState
HandleCount 16
PointerCount 462374
Name \KernelObjects\LowMemoryCondition
Object specific information
Event Type Manual Reset
Event is Waiting
0:002> !handle 224 f
Handle 00000224
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 65527
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:002> ~3s
eax=00000000 ebx=00000001 ecx=00000000 edx=00000000 esi=00000001 edi=00000001
eip=77e8f31c esp=0a47f9bc ebp=0a47fb4c iopl=0 nv up ei pl nz na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!NtWaitForMultipleObjects+0xc:
77e8f31c c21400 ret 14h
0:003> kv
# ChildEBP RetAddr Args to Child
00 0a47f9b8 77ce3560 00000001 0a47fc2c 00000000 ntdll!NtWaitForMultipleObjects+0xc (FPO: [5,0,0])
01 0a47fb4c 792976dc 00000001 0a47fc2c 00000001 KERNELBASE!WaitForMultipleObjectsEx+0xf0 (FPO: [SEH])
WARNING: Stack unwind information not available. Following frames may be wrong.
02 0a47fb7c 79297c3d 00000001 0a47fc2c 00000001 mscorwks!CorMarkThreadInThreadPool+0x2a50
03 0a47fbd0 793389ff 00000001 0a47fc2c 00000001 mscorwks!CorMarkThreadInThreadPool+0x2fb1
04 0a47fc18 09b10740 0a47fc24 00000000 ffffffff mscorwks!ReleaseFusionInterfaces+0x9333f
05 0a47fc88 09cee68e 0a47fcc0 00000000 791b30f0 0x9b10740
06 0a47fca8 791da434 0a47fcf4 00000000 0a47fccc 0x9cee68e
07 0a47fdb8 791da58a 09b26e03 02fcba50 0047fdd8 mscorwks!CoInitializeCor+0xbb94
etc
0:003> dd a47fc2c
0a47fc2c 0000035c ffffffff 0000035c 0a47fce4
etc
0:003> !handle 35c f
Handle 0000035c
Type Event
Attributes 0
GrantedAccess 0x1f0003:
Delete,ReadControl,WriteDac,WriteOwner,Synch
QueryState,ModifyState
HandleCount 2
PointerCount 56602
Name <none>
Object specific information
Event Type Auto Reset
Event is Waiting
0:003> ~4s
eax=00000000 ebx=0a1efec0 ecx=00000000 edx=00000000 esi=00000000 edi=0a1efec0
eip=77e8f0ac esp=0a1efe80 ebp=0a1efee4 iopl=0 nv up ei pl nz ac po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000212
ntdll!NtDelayExecution+0xc:
77e8f0ac c20800 ret 8
0:004> kv
# ChildEBP RetAddr Args to Child
00 0a1efe7c 77ce462a 00000000 0a1efec0 4a2725fc ntdll!NtDelayExecution+0xc (FPO: [2,0,0])
01 0a1efee4 77ce458f 000001f4 00000000 0a1eff80 KERNELBASE!SleepEx+0x8a (FPO: [SEH])
02 0a1efef4 792e9ebe 000001f4 f56e4f7a 00000e55 KERNELBASE!Sleep+0xf (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
03 0a1eff80 76ee62c4 00000000 76ee62a0 4b5d637e mscorwks!ReleaseFusionInterfaces+0x447fe
04 0a1eff94 77e81e39 00000000 4a49bce4 00000000 kernel32!BaseThreadInitThunk+0x24 (FPO: [Non-Fpo])
05 0a1effdc 77e81e04 ffffffff 77ea36b9 00000000 ntdll!__RtlUserThreadStart+0x2f (FPO: [SEH])
06 0a1effec 00000000 792e9e6a 00000000 00000000 ntdll!_RtlUserThreadStart+0x1b (FPO: [Non-Fpo])
||2:2:013> .load C:\windows\microsoft.net\framework\v1.1.4322\sos.dll
||2:2:013> !EEVersion
1.1.4322.573 retail
Workstation build
||2:2:013> !threadpool
CPU utilization 12%
Worker Thread: Total: 0 Running: 0 Idle: 0 MaxLimit: 50 MinLimit: 2
Work Request in Queue: 0
--------------------------------------
Number of Timers: 0
--------------------------------------
Completion Port Thread: Total: 0 Free: 0 MaxFree: 4 CurrentLimit: 0 MaxLimit: 1000 MinLimit: 2
||2:2:013> !threads
ThreadCount: 5
UnstartedThread: 1
BackgroundThread: 3
PendingThread: 0
DeadThread: 0
PreEmptive GC Alloc Lock
ID ThreadOBJ State GC Context Domain Count APT Exception
10 fc 02fbb460 a020 Enabled 00000000:00000000 02fb5838 0 MTA System.Threading.SynchronizationLockException
12 2334 02fbcc78 b220 Enabled 00000000:00000000 02fb5838 0 MTA (Finalizer)
XXX 234c 03018a90 81800220 Enabled 072d7d4c:072d7da0 02fb5838 0 Ukn (Threadpool Worker)
XXX 0 03019660 1400 Enabled 00000000:00000000 02fb5838 0 Ukn
13 2380 03000a30 2001220 Enabled 072ba3f0:072bbda0 02fb5838 0 Ukn
||2:2:013> !syncblk -all
Index SyncBlock MonitorHeld Recursion Thread ThreadID Object Waiting
1 00000000 07292538
2 00000000 07295b28
3 02fdce74 0 0 0 none 07291114 System.AppDomain
4 02fdcdc4 0 0 0 none 0729ba08 Borland.Vcl.TFNWndProc
5 02fdcdf0 0 0 0 none 072a3220 Borland.Vcl.TFNWndProc
6 00000000 072acd28
7 02fdce48 0 0 0 none 072a33b0 Borland.Vcl.TFNWndProc
8 02fdcea0 0 0 0 none 072a6e14 System.__ComObject
9 02fdcecc 0 0 0 none 072a84d4 System.ServiceProcess.NativeMethods/ServiceMainCallback
10 02fdcef8 0 0 0 none 072a850c System.ServiceProcess.NativeMethods/ServiceControlCallbackEx
11 02fdce1c 0 0 0 none 072b034c System.Threading.Thread
12 02fdcf24 0 0 0 none 072b0250 Microsoft.Win32.SafeNativeMethods/TimerAPCProc
-----------------------------
Total 13
ComCallWrapper 0
ComPlusWrapper 1
ComClassFactory 0
Free 0
||2:2:013> !eestack -EE
---------------------------------------------
Thread 10
Current frame:
ChildEBP RetAddr Caller,Callee
0019f5c4 09ce4805 (MethodDesc 0x30c8a38 +0x1bd System.ServiceProcess.ServiceBase.Run)
0019f5f0 09ce3f87 (MethodDesc 0x30c8a48 +0x27 System.ServiceProcess.ServiceBase.Run)
0019f5fc 09ce356c (MethodDesc 0x30c52a8 +0x2c AppName_N2.Units.AppName_N2.AppName_N2)
---------------------------------------------
Thread 12
Current frame:
ChildEBP RetAddr Caller,Callee
0946fdf8 09ceb422 (MethodDesc 0x99aca78 +0x1a Borland.Vcl.TResData.Finalize)
---------------------------------------------
Thread 13
Current frame:
ChildEBP RetAddr Caller,Callee
0a47fc50 09ce51be (MethodDesc 0x99797a0 +0x56 System.Threading.WaitHandle.WaitOne)
0a47fc88 09cee68e (MethodDesc 0x9afe588 +0x1e System.Timers.Timer/WaitableTimer.ListenerThread)
||2:2:013> !COMState
ID TEB APT APTId CallerTID Context
10 fc 00363000 MTA 55a4 0 02fefe90
11 2390 00366000 Ukn
12 2334 00369000 MTA 0 0 02fefe90
13 2380 0037b000 Ukn 0 0 02fefe90
14 21c8 0037e000 Ukn
||2:2:013> !dumpheap -type System.Timers.Timer
Address MT Size
072acd28 09afca04 56
total 1 objects
Statistics:
MT Count TotalSize Class Name
9afca04 1 56 System.Timers.Timer
Total 1 objects
||2:2:013> !dumpobj 072acd28
Name: System.Timers.Timer
MethodTable 0x09afca04
EEClass 0x09cd0828
Size 56(0x38) bytes
mdToken: 020002ec (c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll)
FieldDesc*: 09afc7f4
MT Field Offset Type Attr Value Name
0313643c 40000b6 4 CLASS instance 00000000 __identity
030c878c 4000502 8 CLASS instance 00000000 site
030c878c 4000503 c CLASS instance 00000000 events
030c878c 4000501 50 CLASS static 072a19e0 EventDisposed
09afca04 4001542 10 System.Double instance 5000.000000 interval
09afca04 4001543 2c System.Boolean instance 1 enabled
09afca04 4001544 2d System.Boolean instance 0 initializing
09afca04 4001545 2e System.Boolean instance 0 delayedEnable
09afca04 4001546 18 CLASS instance 072acde0 onIntervalElapsed
09afca04 4001547 28 System.Int32 instance 768 handle
09afca04 4001548 2f System.Boolean instance 1 autoReset
09afca04 4001549 1c CLASS instance 00000000 synchronizingObject
09afca04 400154a 20 CLASS instance 072b0250 apcCallback
09afca04 400154b 24 CLASS instance 072b026c threadPoolCallback
09afca04 400154c 30 System.Boolean instance 0 disposed
||2:2:013> .foreach /pS 3 /ps 2 (ex {!dumpheap -type Exception }){ !dumpobj ${ex} }
Name: System.OutOfMemoryException
MethodTable 0x0313590c
EEClass 0x097b70f4
Size 64(0x40) bytes
mdToken: 02000017 (c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll)
FieldDesc*: 00000000
MT Field Offset Type Attr Value Name
03135734 400001d 4 CLASS instance 00000000 _className
03135734 400001e 8 CLASS instance 00000000 _exceptionMethod
03135734 400001f c CLASS instance 00000000 _exceptionMethodString
03135734 4000020 10 CLASS instance 00000000 _message
03135734 4000021 14 CLASS instance 00000000 _innerException
03135734 4000022 18 CLASS instance 00000000 _helpURL
03135734 4000023 1c CLASS instance 00000000 _stackTrace
03135734 4000024 20 CLASS instance 00000000 _stackTraceString
03135734 4000025 24 CLASS instance 00000000 _remoteStackTraceString
03135734 4000026 2c System.Int32 instance 0 _remoteStackIndex
03135734 4000027 30 System.Int32 instance -2147024882 _HResult
03135734 4000028 28 CLASS instance 00000000 _source
03135734 4000029 34 System.Int32 instance 0 _xptrs
03135734 400002a 38 System.Int32 instance -532459699 _xcode
Name: System.StackOverflowException
MethodTable 0x031359e4
EEClass 0x097b7158
Size 64(0x40) bytes
mdToken: 02000018 (c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll)
FieldDesc*: 00000000
MT Field Offset Type Attr Value Name
03135734 400001d 4 CLASS instance 00000000 _className
03135734 400001e 8 CLASS instance 00000000 _exceptionMethod
03135734 400001f c CLASS instance 00000000 _exceptionMethodString
03135734 4000020 10 CLASS instance 00000000 _message
03135734 4000021 14 CLASS instance 00000000 _innerException
03135734 4000022 18 CLASS instance 00000000 _helpURL
03135734 4000023 1c CLASS instance 00000000 _stackTrace
03135734 4000024 20 CLASS instance 00000000 _stackTraceString
03135734 4000025 24 CLASS instance 00000000 _remoteStackTraceString
03135734 4000026 2c System.Int32 instance 0 _remoteStackIndex
03135734 4000027 30 System.Int32 instance -2147023895 _HResult
03135734 4000028 28 CLASS instance 00000000 _source
03135734 4000029 34 System.Int32 instance 0 _xptrs
03135734 400002a 38 System.Int32 instance -532459699 _xcode
Name: System.ExecutionEngineException
MethodTable 0x03135abc
EEClass 0x097b71bc
Size 64(0x40) bytes
mdToken: 02000019 (c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll)
FieldDesc*: 00000000
MT Field Offset Type Attr Value Name
03135734 400001d 4 CLASS instance 00000000 _className
03135734 400001e 8 CLASS instance 00000000 _exceptionMethod
03135734 400001f c CLASS instance 00000000 _exceptionMethodString
03135734 4000020 10 CLASS instance 00000000 _message
03135734 4000021 14 CLASS instance 00000000 _innerException
03135734 4000022 18 CLASS instance 00000000 _helpURL
03135734 4000023 1c CLASS instance 00000000 _stackTrace
03135734 4000024 20 CLASS instance 00000000 _stackTraceString
03135734 4000025 24 CLASS instance 00000000 _remoteStackTraceString
03135734 4000026 2c System.Int32 instance 0 _remoteStackIndex
03135734 4000027 30 System.Int32 instance -2146233082 _HResult
03135734 4000028 28 CLASS instance 00000000 _source
03135734 4000029 34 System.Int32 instance 0 _xptrs
03135734 400002a 38 System.Int32 instance -532459699 _xcode
Name: System.Threading.SynchronizationLockException
MethodTable 0x09b225d4
EEClass 0x09967fc8
Size 64(0x40) bytes
mdToken: 020000cc (c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll)
FieldDesc*: 00000000
MT Field Offset Type Attr Value Name
03135734 400001d 4 CLASS instance 00000000 _className
03135734 400001e 8 CLASS instance 00000000 _exceptionMethod
03135734 400001f c CLASS instance 00000000 _exceptionMethodString
03135734 4000020 10 CLASS instance 072a447c _message
03135734 4000021 14 CLASS instance 00000000 _innerException
03135734 4000022 18 CLASS instance 00000000 _helpURL
03135734 4000023 1c CLASS instance 00000000 _stackTrace
03135734 4000024 20 CLASS instance 00000000 _stackTraceString
03135734 4000025 24 CLASS instance 00000000 _remoteStackTraceString
03135734 4000026 2c System.Int32 instance 0 _remoteStackIndex
03135734 4000027 30 System.Int32 instance -2146233064 _HResult
03135734 4000028 28 CLASS instance 00000000 _source
03135734 4000029 34 System.Int32 instance 0 _xptrs
03135734 400002a 38 System.Int32 instance -532459699 _xcode
Name: Borland.Vcl.EIniFileException/@MetaEIniFileException
MethodTable 0x09afef6c
EEClass 0x09cd158c
Size 20(0x14) bytes
mdToken: 02000546 (c:\service\AppName_n2.exe)
FieldDesc*: 09afeef4
MT Field Offset Type Attr Value Name
099a8ecc 4000001 c VALUETYPE instance start at 072afeb8 FInstanceTypeHandle
099a8ecc 4000002 4 CLASS instance 00000000 FInstanceType
099a8ecc 4000003 8 CLASS instance 00000000 FClassParent
09afef6c 4000d1b 28 CLASS static 072afeac @Instance
||2:2:013> !dumpobj 072a447c
Name: System.String
MethodTable 0x031342d8
EEClass 0x097b6d70
Size 176(0xb0) bytes
mdToken: 0200000f (c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll)
String: Object synchronization method was called from an unsynchronized block of code.
FieldDesc*: 03133628
MT Field Offset Type Attr Value Name
031342d8 4000013 4 System.Int32 instance 79 m_arrayLength
031342d8 4000014 8 System.Int32 instance 78 m_stringLength
031342d8 4000015 c System.Char instance 4f m_firstChar
031342d8 4000016 0 CLASS shared static Empty
>> Domain:Value 02fb5838:0729121c <<
031342d8 4000017 4 CLASS shared static WhitespaceChars
>> Domain:Value 02fb5838:07291230 <<