Use of 'Apimon' under windows XP

[Greg Roberts]

I hope someone out there has a solution. Thise people who get hot under the
collar about
cross posts, please look away.

Background:

We have a program that goes balistic CPU wise after an hour or so doing the
same thing,
that being displaying an Active X control with ATL code in it.
CPU was level then rose slowly then became more expontential .
No memory or handle leaks but "privilidged" CPU time rising. In fact the
core User CPU time
does not change .

So we turned to apimon (part of the DDK) to see if it could shead some light
on the issue.
(of what the privilidged time was doing)
Although i could get this to work on a few simple programs, it always aborts
on our MFC based
program (VC6 based). The normal issue is in apidll.dll (v5.1.2600.0) which
is needed for apimon, but not part of the kit !
(go figure)
(NB: This was after discovering apimon.exe does not like dll names longer
than 31 chars !!
and changing their names)

(NB: I have just noticed both mfc42.dll & mfc42d.dll are loaded, i wonder if
this is significant?)

Issue:

Many thanks

====== a typical dump on error============

*---------------------------------------
An unexpected error has occurred
Address: 0x47F6697A
Error code: 0xc0000005
Second chance!
*---------------------------------------

eax=00000000 ebx=003a0000 ecx=00000012 edx=73dd106b esi=00000000
edi=73ea0000
eip=47f6697a esp=08a7fe68 ebp=08a7fe90 iopl=0 (null) nv up ei ng nz
na p
e
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000282

47f6697a ff4820 dec dword ptr [eax+0x20]
ds:00e4f556=????????
loading 0x00400000 citect32.exe
loading 0x77f50000 ntdll.dll
loading 0x77e60000 kernel32.dll
loading 0x6db60000 ctl3d32.dll
loading 0x77d40000 user32.dll
loading 0x7e090000 gdi32.dll
loading 0x77dd0000 advapi32.dll
loading 0x78000000 rpcrt4.dll
loading 0x71ad0000 wsock32.dll
loading 0x71ab0000 ws2_32.dll
loading 0x77c10000 msvcrt.dll
loading 0x71aa0000 ws2help.dll
loading 0x28240000 ivlib.dll
loading 0x281b0000 ivsql08.dll
loading 0x28000000 ivutl08.dll
loading 0x00320000 odbc32.dll
loading 0x77340000 comctl32.dll
loading 0x773d0000 shell32.dll
loading 0x70a70000 shlwapi.dll
loading 0x763b0000 comdlg32.dll
loading 0x600f0000 ctutil32.dll
loading 0x77c00000 version.dll
loading 0x76c90000 imagehlp.dll
loading 0x10000000 cidebughelp.dll
loading 0x55900000 msvcp60.dll
loading 0x77120000 oleaut32.dll
loading 0x771b0000 ole32.dll
loading 0x60010000 ctrender.dll
loading 0x60060000 techdo32.dll
loading 0x00360000 ctg32.dll
loading 0x00370000 dunzip32.dll
loading 0x71b20000 mpr.dll
loading 0x60070000 ctregion.dll
loading 0x600d0000 ct_ipc.dll
loading 0x003a0000 ctcomdlg.dll
loading 0x73dd0000 mfc42.dll 6.0.8665.0
loading 0x003b0000 ctversion.dll
loading 0x006a0000 ciexceptionmailer.dll
loading 0x003c0000 dzip32.dll
loading 0x73000000 winspool.drv
loading 0x006f0000 ctkc.dll
loading 0x10200000 msvcrtd.dll
loading 0x10480000 msvcp60d.dll
loading 0x71c20000 netapi32.dll
loading 0x76b40000 winmm.dll
loading 0x63000000 wininet.dll
loading 0x762c0000 crypt32.dll
loading 0x762a0000 msasn1.dll
loading 0x00710000 enable40.dll
loading 0x00770000 ftrun32.dll
loading 0x007a0000 zlib1.dll
loading 0x71950000 comctl32.dll
loading 0x1f850000 odbcint.dll
loading 0x015f0000 cteng32.dll
loading 0x016e0000 cteng32.dll
loading 0x6bd00000 syncor11.dll
loading 0x47f60000 apidll.dll
loading 0x01b50000 vnchooks.dll
loading 0x71a50000 mswsock.dll
loading 0x76f20000 dnsapi.dll
loading 0x76fb0000 winrnr.dll
loading 0x76f60000 wldap32.dll
loading 0x76fc0000 rasadhlp.dll
loading 0x7c890000 clbcatq.dll
loading 0x77050000 comres.dll
loading 0x72e00000 msxml3.dll
loading 0x1a400000 urlmon.dll
loading 0x74770000 mlang.dll
loading 0x0ffd0000 rsaenh.dll
loading 0x75a70000 userenv.dll
loading 0x61e00000 mapi32.dll
loading 0x60e00000 diskdrv.dll
loading 0x08360000 citrendmanager.dll
loading 0x08390000 citrendarchivefileoffset.dll
loading 0x083e0000 citrendarchivefileoffset8.dll
loading 0x5f400000 mfc42d.dll 6.0.8665.0
loading 0x08640000 citrendarchiveinterpole.dll
ApiMon> k

08a7fe90 73dd106b 0x47f6697a
08a80128 020b0348 Ordinal3030
08a800c8 020b0b18 0x020b0348
08a7fec0 003a2947 0x020b0b18
08a7fee0 77f5b42c YesNoAllDlg_No
08a7ff00 77f629df LdrInitializeThunk
08a7ff7c 47f66960 LdrShutdownThread
08a80068 020b0078 0x47f66960
08a7ffb4 77e7d341 0x020b0078
08a7ffec 00000000 RegisterWaitForInputIdle

ApiMon>

 

[vipin]

Did you check the profiler which can profile times taken by functions in the
application before you try apimon?

thanks
vipin

I hope someone out there has a solution. Thise people who get hot under the
collar about
cross posts, please look away.

Background:

We have a program that goes balistic CPU wise after an hour or so doing the
same thing,
that being displaying an Active X control with ATL code in it.
CPU was level then rose slowly then became more expontential .
No memory or handle leaks but "privilidged" CPU time rising. In fact the
core User CPU time
does not change .

So we turned to apimon (part of the DDK) to see if it could shead some light
on the issue.
(of what the privilidged time was doing)
Although i could get this to work on a few simple programs, it always aborts
on our MFC based
program (VC6 based). The normal issue is in apidll.dll (v5.1.2600.0) which
is needed for apimon, but not part of the kit !
(go figure)
(NB: This was after discovering apimon.exe does not like dll names longer
than 31 chars !!
and changing their names)

(NB: I have just noticed both mfc42.dll & mfc42d.dll are loaded, i wonder if
this is significant?)

Issue:
times
and counts)
Many thanks

====== a typical dump on error============

*---------------------------------------
An unexpected error has occurred
Address: 0x47F6697A
Error code: 0xc0000005
Second chance!
*---------------------------------------

eax=00000000 ebx=003a0000 ecx=00000012 edx=73dd106b esi=00000000
edi=73ea0000
eip=47f6697a esp=08a7fe68 ebp=08a7fe90 iopl=0 (null) nv up ei ng nz
na p
e
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000282

47f6697a ff4820 dec dword ptr [eax+0x20]
ds:00e4f556=????????
loading 0x00400000 citect32.exe
loading 0x77f50000 ntdll.dll
loading 0x77e60000 kernel32.dll
loading 0x6db60000 ctl3d32.dll
loading 0x77d40000 user32.dll
loading 0x7e090000 gdi32.dll
loading 0x77dd0000 advapi32.dll
loading 0x78000000 rpcrt4.dll
loading 0x71ad0000 wsock32.dll
loading 0x71ab0000 ws2_32.dll
loading 0x77c10000 msvcrt.dll
loading 0x71aa0000 ws2help.dll
loading 0x28240000 ivlib.dll
loading 0x281b0000 ivsql08.dll
loading 0x28000000 ivutl08.dll
loading 0x00320000 odbc32.dll
loading 0x77340000 comctl32.dll
loading 0x773d0000 shell32.dll
loading 0x70a70000 shlwapi.dll
loading 0x763b0000 comdlg32.dll
loading 0x600f0000 ctutil32.dll
loading 0x77c00000 version.dll
loading 0x76c90000 imagehlp.dll
loading 0x10000000 cidebughelp.dll
loading 0x55900000 msvcp60.dll
loading 0x77120000 oleaut32.dll
loading 0x771b0000 ole32.dll
loading 0x60010000 ctrender.dll
loading 0x60060000 techdo32.dll
loading 0x00360000 ctg32.dll
loading 0x00370000 dunzip32.dll
loading 0x71b20000 mpr.dll
loading 0x60070000 ctregion.dll
loading 0x600d0000 ct_ipc.dll
loading 0x003a0000 ctcomdlg.dll
loading 0x73dd0000 mfc42.dll 6.0.8665.0
loading 0x003b0000 ctversion.dll
loading 0x006a0000 ciexceptionmailer.dll
loading 0x003c0000 dzip32.dll
loading 0x73000000 winspool.drv
loading 0x006f0000 ctkc.dll
loading 0x10200000 msvcrtd.dll
loading 0x10480000 msvcp60d.dll
loading 0x71c20000 netapi32.dll
loading 0x76b40000 winmm.dll
loading 0x63000000 wininet.dll
loading 0x762c0000 crypt32.dll
loading 0x762a0000 msasn1.dll
loading 0x00710000 enable40.dll
loading 0x00770000 ftrun32.dll
loading 0x007a0000 zlib1.dll
loading 0x71950000 comctl32.dll
loading 0x1f850000 odbcint.dll
loading 0x015f0000 cteng32.dll
loading 0x016e0000 cteng32.dll
loading 0x6bd00000 syncor11.dll
loading 0x47f60000 apidll.dll
loading 0x01b50000 vnchooks.dll
loading 0x71a50000 mswsock.dll
loading 0x76f20000 dnsapi.dll
loading 0x76fb0000 winrnr.dll
loading 0x76f60000 wldap32.dll
loading 0x76fc0000 rasadhlp.dll
loading 0x7c890000 clbcatq.dll
loading 0x77050000 comres.dll
loading 0x72e00000 msxml3.dll
loading 0x1a400000 urlmon.dll
loading 0x74770000 mlang.dll
loading 0x0ffd0000 rsaenh.dll
loading 0x75a70000 userenv.dll
loading 0x61e00000 mapi32.dll
loading 0x60e00000 diskdrv.dll
loading 0x08360000 citrendmanager.dll
loading 0x08390000 citrendarchivefileoffset.dll
loading 0x083e0000 citrendarchivefileoffset8.dll
loading 0x5f400000 mfc42d.dll 6.0.8665.0
loading 0x08640000 citrendarchiveinterpole.dll
ApiMon> k

08a7fe90 73dd106b 0x47f6697a
08a80128 020b0348 Ordinal3030
08a800c8 020b0b18 0x020b0348
08a7fec0 003a2947 0x020b0b18
08a7fee0 77f5b42c YesNoAllDlg_No
08a7ff00 77f629df LdrInitializeThunk
08a7ff7c 47f66960 LdrShutdownThread
08a80068 020b0078 0x47f66960
08a7ffb4 77e7d341 0x020b0078
08a7ffec 00000000 RegisterWaitForInputIdle

ApiMon>

 

[Carrie Garth]

| "Greg Roberts" <[email protected]>
| Message | <SNIP> We have a program that goes balistic CPU wise after an
| hour or so doing the same thing, that being displaying an
| Active X control with ATL code in it. <SNIP>
|
| So we turned to apimon (part of the DDK) to see if it could
| shead some light on the issue. (of what the privilidged time
| was doing) Although i could get this to work on a few simple
| programs, it always aborts on our MFC based program (VC6
| based). The normal issue is in apidll.dll (v5.1.2600.0) which
| is needed for apimon, but not part of the kit ! <SNIP>

I am not a programmer so I cannot help with your "program that
goes balistic CPU wise". However, perhaps the following
information can be of help:

First, in regards to your statement: "The normal issue is in
apidll.dll (v5.1.2600.0) which is needed for apimon, but not part
of the kit ! "

The API Monitor Debugger application (apimon.exe) that includes
apidll.dll file version 5.1.2600.0 is one of the Microsoft
Windows XP Support Tools. For more information search the
following Microsoft Web Site:

Microsoft DLL Help Database
http://support.microsoft.com/servicedesks/fileversion/dllinfo.asp

The Windows Support Tools are not installed onto your PC by
default, so you will need to install them. Furthermore, apimon
is only installed if you select "Complete installation". For more
information see the following Microsoft Knowledge Base article
and documentation:

KB306794 - How to Install the Support Tools from the
Windows XP CD-ROM
http://support.microsoft.com/default.aspx?Product=winxp&scid=kb;en-us;306794

Microsoft Support
Using the Windows XP support tools
http://support.microsoft.com/default.aspx?scid=/directory/worldwide/en-gb/utility.asp

Second, in regards to your statement: " mfc42.dll & mfc42d.dll
are loaded, i wonder if this is significant?"

These are two of Microsoft's "redistributable" files that many
programmers include in software packages. And according to the
Roxio Web Page that includes troubleshooting steps for the file
mfc42.dll (see link below), "When a program is started up and
Windows tries to load a DLL into memory, it first looks in the
program's working directory, then in %WINDIR%\SYSTEM32,
and loads whichever version it finds first." And if an earlier
version is loaded a conflict may occur. To prevent conflicts,
"place the highest version number of the file" in the
%WINDIR%\SYSTEM32 folder.

Easy CD Creator 4.x Installation Guide
SECTION: "About DLL Conflicts, Why They Happen, How to Cure Them"
http://www.roxio.com/en/support/ecdc/installecdc4.html

You can find peer-to-peer support for Visual Tools & Languages in
the MSDN Discussion Groups for Visual Tools and Languages:

MSDN Home
MSDN Newsgroups
Visual Tools & Languages
http://msdn.microsoft.com/newsgroups/topic.aspx?url=/MSDN-FILES/028/201/012/topic.xml

 

[Pavel Lebedinsky]

| <SNIP> We have a program that goes balistic CPU wise after an
| hour or so doing the same thing, that being displaying an
| Active X control with ATL code in it. <SNIP>
|
| So we turned to apimon (part of the DDK) to see if it could
| shead some light on the issue. (of what the privilidged time
| was doing) Although i could get this to work on a few simple
| programs, it always aborts on our MFC based program (VC6
| based). The normal issue is in apidll.dll (v5.1.2600.0) which
| is needed for apimon, but not part of the kit ! <SNIP>

In my experience ApiMon is not very reliable and would often
crash when used with non-trivial programs (the last time I used
it was at least a couple of years ago, so things might have changed).

Personally I would use windbg/cdb to find out what the pogram is
doing. Install latest debuggers from
http://www.microsoft.com/whdc/DevTools/Debugging/default.mspx
then do something like this:

c:\debuggers> cdb -p <process id>

0:000> .symfix+ c:\symbols
0:000> .reload
0:000> !runaway 3

This will list all threads in the process and their user and
kernel mode times. Let's say thread 0xabc is the one that
consumed most CPU time.

0:000> ~~[abc]s
0:000> k

This will switch to thread id 0xabc and display its stack trace.
If you can't see anything unusual in the stack, continue
execution ('g') and break in (Ctrl+C) several times to see what
this thread is doing on average.

Second, in regards to your statement: " mfc42.dll & mfc42d.dll
are loaded, i wonder if this is significant?"

These are two of Microsoft's "redistributable" files that many
programmers include in software packages.

MFC42D.DLL is a debug version and is NOT redistributable.

To prevent conflicts, "place the highest version number of
the file" in the %WINDIR%\SYSTEM32 folder.

This is a good way to introduce conflicts, not to prevent them.
If you need a particular version of a DLL, install it into your
application's folder.