jorda521, краши ловлю хз почему вот лог[cut]Revision: TrinityCore Rev: * Release Hash: * (Win32,little-endian)
Date 13:6:2010. Time 16:51
//=====================================================
*** Hardware ***
Processor: AMD Athlon 64 Processor 3200+
Number Of Processors: 1
Physical Memory: 3145200 KB (Available: 2514984 KB)
Commit Charge Limit: 4194303 KB *** Operation System ***
Microsoft Windows XP Professional Service Pack 3 (Version 5.1, Build 2600)
//=====================================================
Exception code: C0000005 ACCESS_VIOLATION
Fault address: 7C91A344 01:00019344 C:\WINDOWS\system32\ntdll.dll
Registers:
EAX:19496000
EBX:16760000
ECX:1E760000
EDX:000001A0
ESI:04403520
EDI:194BA358
CS:EIP:001B :7C91A344
SS:ESP:0023:0FFFEF1C EBP:0FFFEF30
DS:0023 ES:0023 FS:003B GS:0000
Flags:00010283
Call stack:
Address Frame Function SourceFile
7C91A344 00000000 RtlReAllocateHeap+E94
7C919CEC 00000000 RtlReAllocateHeap+83C
7C91179E 00000000 RtlInitializeCriticalSection+149
78583DB8 00000000 malloc+79
78583EB8 00000000 ??2@YAPAXI@Z+1F
00731007 00000000 std::_Allocate<std::_List_nod<AuraEffect *,std::allocator<AuraEffect *> >::_Node>+57
0072C9D4 00000000 std::allocator<std::_List_nod<AuraEffect *,std::allocator<AuraEffect *> >::_Node>::allocate+14
00729069 00000000 std::list<AuraEffect *,std::allocator<AuraEffect *> >::_Buynode+39
00725FA7 00000000 std::list<AuraEffect *,std::allocator<AuraEffect *> >::list<AuraEffect *,std::allocator<AuraEffect *> >+67
00CBAD9F 00000000 `eh vector constructor iterator'+27
006E92A6 00000000 Unit::Unit+206
0078AB30 00000000 Creature::Creature+30
0091EDEA 00000000 LoadHelper<Creature>+9A
0091E683 00000000 ObjectGridLoader::Visit+103
0091F88F 00000000 VisitorHelper<ObjectGridLoader,Creature>+F
0091F6F0 00000000 VisitorHelper<ObjectGridLoader,Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > >+10
0091F5B3 00000000 VisitorHelper<ObjectGridLoader,GameObject,TypeList<Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > > >+23
0091F4C0 00000000 VisitorHelper<ObjectGridLoader,TypeList<GameObject,TypeList<Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > > > >+10
0091E7AC 00000000 ObjectGridLoader::Load+1C
0091E8C0 00000000 ObjectGridLoader::LoadN+C0
006B9AA5 00000000 Map::EnsureGridLoaded+125
006B98F5 00000000 Map::EnsureGridLoadedAtEnter+15
006B9C97 00000000 Map::Add+E7
00784849 00000000 WorldSession::HandleMoveWorldportAckOpcode+439
00784402 00000000 WorldSession::HandleMoveWorldportAckOpcode+22
0055D801 00000000 WorldSession::Update+471
00591D43 00000000 World::UpdateSessions+C3
0058FEAC 00000000 World::Update+45C
0040832E 00000000 WorldRunnable::run+8E
00C0BC09 00000000 ACE_Based::Thread::ThreadTask+19
00F419F4 00000000 ?invoke@ACE_OS_Thread_Adapter@@UAEKXZ+74
78543433 00000000 _endthreadex+44
785434C7 00000000 _endthreadex+D8
7C80B729 00000000 GetModuleFileNameA+1BA
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802542 00000000 WaitForSingleObject+12
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802542 00000000 WaitForSingleObject+12
00F3EEFD 00000000 ?cond_wait@ACE_OS@@YAHPAVACE_cond_t@@PAU_RTL_CRITICAL_SECTION@@@Z+3D
8B000000 FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802542 00000000 WaitForSingleObject+12
00F3EEFD 00000000 ?cond_wait@ACE_OS@@YAHPAVACE_cond_t@@PAU_RTL_CRITICAL_SECTION@@@Z+3D
8B000000 FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802542 00000000 WaitForSingleObject+12
00F3EEFD 00000000 ?cond_wait@ACE_OS@@YAHPAVACE_cond_t@@PAU_RTL_CRITICAL_SECTION@@@Z+3D
8B000000 FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802542 00000000 WaitForSingleObject+12
00F3EEFD 00000000 ?cond_wait@ACE_OS@@YAHPAVACE_cond_t@@PAU_RTL_CRITICAL_SECTION@@@Z+3D
8B000000 FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
0FFFDF54 00000000 0000:00000000
FF50D845 FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C873071 00000000 GetConsoleInputWaitHandle+318
7C8731B8 00000000 ReadConsoleA+3B
7C8018B7 00000000 ReadFile+A5
78588ED9 00000000 _wsopen_s+228
7858935D 00000000 _read+C0
7854EFD2 00000000 _filbuf+7D
7854E671 00000000 fgets+109
00401F1F 00000000 CliRunnable::run+BF
00C0BC09 00000000 ACE_Based::Thread::ThreadTask+19
00F419F4 00000000 ?invoke@ACE_OS_Thread_Adapter@@UAEKXZ+74
78543433 00000000 _endthreadex+44
785434C7 00000000 _endthreadex+D8
7C80B729 00000000 GetModuleFileNameA+1BA
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C802455 00000000 Sleep+F
00C0BDF0 00000000 ACE_Based::Thread::Sleep+30
00404188 00000000 RARunnable::run+268
00C0BC09 00000000 ACE_Based::Thread::ThreadTask+19
00F419F4 00000000 ?invoke@ACE_OS_Thread_Adapter@@UAEKXZ+74
78543433 00000000 _endthreadex+44
785434C7 00000000 _endthreadex+D8
7C80B729 00000000 GetModuleFileNameA+1BA
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
71A35FA7 00000000 0001:00004FA7 C:\WINDOWS\system32\MSWSOCK.dll
71A9314F 00000000 select+A7
00F052A5 00000000 ?wait_for_multiple_events@?$ACE_Select_Reactor_T@V?$ACE_Reactor_Token_T@VACE_Token@@@@@@MAEHAAVACE_Select_Reactor_Handle_Set@@PAVACE_Time_Va lue@@@Z+115
FFFFFFFF FFFFFFFF 0000:00000000
Call stack:
Address Frame Function SourceFile
7C90E514 00000000 KiFastSystemCallRet+0
7C901046 00000000 RtlEnterCriticalSection+46
78583DB8 00000000 malloc+79
78583EB8 00000000 ??2@YAPAXI@Z+1F
00CBAF36 00000000 operator new+18
008A3779 00000000 WorldSocket::handle_input_header+F9
008A3B60 00000000 WorldSocket::handle_input_missing_data+200
008A2F04 00000000 WorldSocket::handle_input+24
00F6C8E7 00000000 ?dispatch_socket_event@ACE_TP_Reactor@@AAEHAAVACE_EH_Dispatch_Info@@@Z+27
========================
Local Variables And Parameters
Call stack:
Address Frame Function SourceFile
7C91A344 00000000 RtlReAllocateHeap+E94
7C919CEC 00000000 RtlReAllocateHeap+83C
7C91179E 00000000 RtlInitializeCriticalSection+149
78583DB8 00000000 malloc+79
78583EB8 00000000 ??2@YAPAXI@Z+1F
00731007 00000000 std::_Allocate<std::_List_nod<AuraEffect *,std::allocator<AuraEffect *> >::_Node>+57
punting on symbol _Count
Local <user defined> '__formal'
0072C9D4 00000000 std::allocator<std::_List_nod<AuraEffect *,std::allocator<AuraEffect *> >::_Node>::allocate+14
Local <user defined> 'this'
punting on symbol _Count
00729069 00000000 std::list<AuraEffect *,std::allocator<AuraEffect *> >::_Buynode+39
Local <user defined> 'this'
Local <user defined> '_Pnode'
punting on symbol _Linkcnt
00725FA7 00000000 std::list<AuraEffect *,std::allocator<AuraEffect *> >::list<AuraEffect *,std::allocator<AuraEffect *> >+67
Local <user defined> 'this'
00CBAD9F 00000000 `eh vector constructor iterator'+27
punting on symbol ptr
punting on symbol size
punting on symbol count
Local <user defined> 'pCtor'
Local <user defined> 'pDtor'
punting on symbol success
punting on symbol i
006E92A6 00000000 Unit::Unit+206
Local <user defined> 'this'
0078AB30 00000000 Creature::Creature+30
Local <user defined> 'this'
0091EDEA 00000000 LoadHelper<Creature>+9A
Local <user defined> 'obj'
punting on symbol guid
Local <user defined> 'i_guid'
Local <user defined> 'guid_set'
Local <user defined> 'cell'
Local <user defined> 'm'
Local <user defined> 'count'
Local <user defined> 'map'
0091E683 00000000 ObjectGridLoader::Visit+103
Local <user defined> 'this'
Local <user defined> 'm'
Local <user defined> 'cell_pair'
punting on symbol x
punting on symbol y
punting on symbol cell_id
Local <user defined> 'cell_guids'
0091F88F 00000000 VisitorHelper<ObjectGridLoader,Creature>+F
Local <user defined> 'v'
Local <user defined> 'c'
0091F6F0 00000000 VisitorHelper<ObjectGridLoader,Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > >+10
Local <user defined> 'v'
Local <user defined> 'c'
0091F5B3 00000000 VisitorHelper<ObjectGridLoader,GameObject,TypeList<Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > > >+23
Local <user defined> 'v'
Local <user defined> 'c'
0091F4C0 00000000 VisitorHelper<ObjectGridLoader,TypeList<GameObject,TypeList<Creature,TypeList<DynamicObject,TypeList<Corpse,TypeNull> > > > >+10
Local <user defined> 'v'
Local <user defined> 'c'
0091E7AC 00000000 ObjectGridLoader::Load+1C
Local <user defined> 'loader'
Local <user defined> 'this'
Local <user defined> 'grid'
0091E8C0 00000000 ObjectGridLoader::LoadN+C0
punting on symbol y
punting on symbol x
Local <user defined> 'this'
006B9AA5 00000000 Map::EnsureGridLoaded+125
Local <user defined> 'loader'
Local <user defined> 'this'
Local <user defined> 'cell'
Local <user defined> 'grid'
006B98F5 00000000 Map::EnsureGridLoadedAtEnter+15
Local <user defined> 'this'
Local <user defined> 'cell'
Local <user defined> 'player'
Local <user defined> 'grid'
006B9C97 00000000 Map::Add+E7
Local <user defined> 'this'
Local <user defined> 'player'
Local <user defined> 'cell'
Local <user defined> 'grid'
Local <user defined> 'p'
00784849 00000000 WorldSession::HandleMoveWorldportAckOpcode+439
Local <user defined> 'this'
Local <user defined> 'mEntry'
Local <user defined> 'oldMap'
Local <user defined> 'newMap'
Local <user defined> 'loc'
punting on symbol newzone
Local <user defined> 'mInstance'
Local <user defined> 'corpse'
punting on symbol allowMount
punting on symbol newarea
00784402 00000000 WorldSession::HandleMoveWorldportAckOpcode+22
Local <user defined> 'this'
Local <user defined> '__formal'
0055D801 00000000 WorldSession::Update+471
Local <user defined> 'opHandle'
Local <user defined> 'this'
punting on symbol diff
Local <user defined> 'packet'
punting on symbol currTime
00591D43 00000000 World::UpdateSessions+C3
Local <user defined> 'next'
Local <user defined> 'itr'
Local <user defined> 'this'
punting on symbol diff
Local <user defined> 'sess'
0058FEAC 00000000 World::Update+45C
punting on symbol i
Local <user defined> 'this'
punting on symbol diff
Local unsigned int 'autobroadcaston' = 1
0040832E 00000000 WorldRunnable::run+8E
punting on symbol diff
Local <user defined> 'this'
punting on symbol realCurrTime
punting on symbol realPrevTime
punting on symbol prevSleepTime
00C0BC09 00000000 ACE_Based::Thread::ThreadTask+19
punting on symbol param
Local <user defined> '_task'
00F419F4 00000000 ?invoke@ACE_OS_Thread_Adapter@@UAEKXZ+74
78543433 00000000 _endthreadex+44
785434C7 00000000 _endthreadex+D8
7C80B729 00000000 GetModuleFileNameA+1BA
========================
Global Variables
<user defined> 'RtlEnterCriticalSection'
<user defined> 'RtlLeaveCriticalSection'
<user defined> 'RtlTryEnterCriticalSection'
<user defined> 'LdrInitializeThunk'
<user defined> 'RtlActivateActivationContextUnsafeFast'
<user defined> 'RtlDeactivateActivationContextUnsafeFast'
<user defined> 'DbgBreakPoint' = FF8BC3CC
<user defined> 'DbgUserBreakPoint'
<user defined> 'NtCurrentTeb'
<user defined> 'RtlInitString'
<user defined> 'RtlInitAnsiString'
<user defined> 'RtlInitUnicodeString'
<user defined> '_CIsin'
<user defined> 'sin'
<user defined> '_CIsqrt'
<user defined> 'sqrt'
<user defined> '_alldiv'
<user defined> '_alldvrm'
<user defined> '_allmul'
<user defined> '_alloca_probe'
<user defined> '_chkstk'
<user defined> '_allrem'
<user defined> '_allshl'
<user defined> '_allshr'
<user defined> '_aulldiv'
<user defined> '_aulldvrm'
<user defined> '_aullrem'
<user defined> '_aullshr'
<user defined> '_ftol'
<user defined> '_memccpy'
<user defined> 'atan'
<user defined> 'ceil'
<user defined> 'floor'
<user defined> 'memchr'
<user defined> 'memcmp'
<user defined> 'memcpy'
<user defined> 'memmove'
<user defined> 'memset'
<user defined> 'strcpy'
<user defined> 'strcat'
<user defined> 'strcmp'
<user defined> 'strcspn'
<user defined> 'strlen'
<user defined> 'strncat'
<user defined> 'strncmp'
<user defined> 'strncpy'
<user defined> 'strpbrk'
<user defined> 'strrchr'
<user defined> 'strspn'
<user defined> 'tan'
<user defined> 'RtlInterlockedPushListSList'
<user defined> 'RtlFirstEntrySList'
<user defined> 'RtlUshortByteSwap'
<user defined> 'RtlUlongByteSwap'
<user defined> 'RtlUlonglongByteSwap'
<user defined> 'RtlCompareMemory'
<user defined> 'RtlCompareMemoryUlong'
<user defined> 'RtlFillMemory'
<user defined> 'RtlFillMemoryUlong'
<user defined> 'RtlZeroMemory'
<user defined> 'RtlMoveMemory'
<user defined> 'RtlLargeIntegerAdd'
<user defined> 'RtlEnlargedIntegerMultiply'
<user defined> 'RtlEnlargedUnsignedMultiply'
<user defined> 'RtlEnlargedUnsignedDivide'
<user defined> 'RtlExtendedLargeIntegerDivide'
<user defined> 'RtlExtendedMagicDivide'
<user defined> 'RtlExtendedIntegerMultiply'
<user defined> 'RtlLargeIntegerShiftLeft'
<user defined> 'RtlLargeIntegerShiftRight'
<user defined> 'RtlLargeIntegerArithmeticShift'
<user defined> 'RtlLargeIntegerNegate'
<user defined> 'RtlLargeIntegerSubtract'
<user defined> 'RtlConvertLongToLargeInteger' = 4C2990424448B
<user defined> 'RtlConvertUlongToLargeInteger'
<user defined> 'RtlCaptureContext'
<user defined> 'NtAcceptConnectPort'
<user defined> 'ZwAcceptConnectPort'
<user defined> 'ZwAccessCheck'
<user defined> 'NtAccessCheck'
<user defined> 'ZwAccessCheckAndAuditAlarm'
<user defined> 'NtAccessCheckAndAuditAlarm'
<user defined> 'ZwAccessCheckByType'
<user defined> 'NtAccessCheckByType'
<user defined> 'ZwAccessCheckByTypeAndAuditAlarm'
<user defined> 'NtAccessCheckByTypeAndAuditAlarm'
<user defined> 'ZwAccessCheckByTypeResultList'
<user defined> 'NtAccessCheckByTypeResultList'
<user defined> 'NtAccessCheckByTypeResultListAndAuditAlarm'
<user defined> 'ZwAccessCheckByTypeResultListAndAuditAlarm'
<user defined> 'ZwAccessCheckByTypeResultListAndAuditAlarmByHandle'
<user defined> 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle'
<user defined> 'NtAddAtom'
<user defined> 'ZwAddAtom'
<user defined> 'NtAddBootEntry'
<user defined> 'ZwAddBootEntry'
<user defined> 'ZwAdjustGroupsToken'
<user defined> 'NtAdjustGroupsToken'
<user defined> 'ZwAdjustPrivilegesToken'
<user defined> 'NtAdjustPrivilegesToken'
<user defined> 'ZwAlertResumeThread'
<user defined> 'NtAlertResumeThread'
<user defined> 'NtAlertThread'
<user defined> 'ZwAlertThread'
<user defined> 'ZwAllocateLocallyUniqueId'
<user defined> 'NtAllocateLocallyUniqueId'
<user defined> 'ZwAllocateUserPhysicalPages'
<user defined> 'NtAllocateUserPhysicalPages'
<user defined> 'NtAllocateUuids'
<user defined> 'ZwAllocateUuids'
<user defined> 'NtAllocateVirtualMemory'
<user defined> 'ZwAllocateVirtualMemory'
<user defined> 'NtAreMappedFilesTheSame'
<user defined> 'ZwAreMappedFilesTheSame'
<user defined> 'ZwAssignProcessToJobObject'
<user defined> 'NtAssignProcessToJobObject'
<user defined> 'NtCallbackReturn'
<user defined> 'ZwCallbackReturn'
<user defined> 'NtCancelDeviceWakeupRequest'
<user defined> 'ZwCancelDeviceWakeupRequest'
<user defined> 'NtCancelIoFile'
<user defined> 'ZwCancelIoFile'
<user defined> 'NtCancelTimer'
<user defined> 'ZwCancelTimer'
<user defined> 'NtClearEvent'
<user defined> 'ZwClearEvent'
<user defined> 'NtClose'
<user defined> 'ZwClose'
<user defined> 'NtCloseObjectAuditAlarm'
<user defined> 'ZwCloseObjectAuditAlarm'
<user defined> 'NtCompactKeys'
<user defined> 'ZwCompactKeys'
<user defined> 'NtCompareTokens'
<user defined> 'ZwCompareTokens'
<user defined> 'NtCompleteConnectPort'
<user defined> 'ZwCompleteConnectPort'
<user defined> 'NtCompressKey'
<user defined> 'ZwCompressKey'
<user defined> 'NtConnectPort'
<user defined> 'ZwConnectPort'
<user defined> 'NtContinue'
<user defined> 'ZwContinue'
<user defined> 'ZwCreateDebugObject'
<user defined> 'NtCreateDebugObject'
<user defined> 'NtCreateDirectoryObject'
<user defined> 'ZwCreateDirectoryObject'
<user defined> 'ZwCreateEvent'
<user defined> 'NtCreateEvent'
<user defined> 'ZwCreateEventPair'
<user defined> 'NtCreateEventPair'
<user defined> 'ZwCreateFile'
<user defined> 'NtCreateFile'
<user defined> 'NtCreateIoCompletion'
<user defined> 'ZwCreateIoCompletion'
<user defined> 'NtCreateJobObject'
<user defined> 'ZwCreateJobObject'
<user defined> 'NtCreateJobSet'
<user defined> 'ZwCreateJobSet'
<user defined> 'ZwCreateKey'
<user defined> 'NtCreateKey'
<user defined> 'NtCreateMailslotFile'
<user defined> 'ZwCreateMailslotFile'
<user defined> 'ZwCreateMutant'
<user defined> 'NtCreateMutant'
<user defined> 'ZwCreateNamedPipeFile'
<user defined> 'NtCreateNamedPipeFile'
<user defined> 'ZwCreatePagingFile'
<user defined> 'NtCreatePagingFile'
<user defined> 'NtCreatePort'
<user defined> 'ZwCreatePort'
<user defined> 'NtCreateProcess'
<user defined> 'ZwCreateProcess'
<user defined> 'ZwCreateProcessEx'
<user defined> 'NtCreateProcessEx'
<user defined> 'ZwCreateProfile'
<user defined> 'NtCreateProfile'
<user defined> 'ZwCreateSection'
<user defined> 'NtCreateSection'
<user defined> 'ZwCreateSemaphore'
<user defined> 'NtCreateSemaphore'
<user defined> 'NtCreateSymbolicLinkObject'
<user defined> 'ZwCreateSymbolicLinkObject'
<user defined> 'NtCreateThread'
<user defined> 'ZwCreateThread'
<user defined> 'NtCreateTimer'
<user defined> 'ZwCreateTimer'
<user defined> 'NtCreateToken'
<user defined> 'ZwCreateToken'
<user defined> 'NtCreateWaitablePort'
<user defined> 'ZwCreateWaitablePort'
<user defined> 'ZwDebugActiveProcess'
<user defined> 'NtDebugActiveProcess'
<user defined> 'NtDebugContinue'
<user defined> 'ZwDebugContinue'
<user defined> 'NtDelayExecution'
<user defined> 'ZwDelayExecution'
<user defined> 'NtDeleteAtom'
<user defined> 'ZwDeleteAtom'
<user defined> 'NtDeleteBootEntry'
<user defined> 'ZwDeleteBootEntry'
<user defined> 'NtDeleteFile'
<user defined> 'ZwDeleteFile'
<user defined> 'ZwDeleteKey'
<user defined> 'NtDeleteKey'
<user defined> 'ZwDeleteObjectAuditAlarm'
<user defined> 'NtDeleteObjectAuditAlarm'
<user defined> 'NtDeleteValueKey'
<user defined> 'ZwDeleteValueKey'
<user defined> 'NtDeviceIoControlFile'
<user defined> 'ZwDeviceIoControlFile'
<user defined> 'ZwDisplayString'
<user defined> 'NtDisplayString'
<user defined> 'ZwDuplicateObject'
<user defined> 'NtDuplicateObject'
<user defined> 'ZwDuplicateToken'
<user defined> 'NtDuplicateToken'
<user defined> 'ZwEnumerateBootEntries'
<user defined> 'NtEnumerateBootEntries'
<user defined> 'ZwEnumerateKey'
<user defined> 'NtEnumerateKey'
<user defined> 'ZwEnumerateSystemEnvironmentValuesEx'
<user defined> 'NtEnumerateSystemEnvironmentValuesEx'
<user defined> 'ZwEnumerateValueKey'
<user defined> 'NtEnumerateValueKey'
<user defined> 'ZwExtendSection'
<user defined> 'NtExtendSection'
<user defined> 'NtFilterToken'
<user defined> 'ZwFilterToken'
<user defined> 'NtFindAtom'
<user defined> 'ZwFindAtom'
<user defined> 'NtFlushBuffersFile'
<user defined> 'ZwFlushBuffersFile'
<user defined> 'NtFlushInstructionCache'
<user defined> 'ZwFlushInstructionCache'
<user defined> 'NtFlushKey'
<user defined> 'ZwFlushKey'
<user defined> 'ZwFlushVirtualMemory'
<user defined> 'NtFlushVirtualMemory'
<user defined> 'ZwFlushWriteBuffer'
<user defined> 'NtFlushWriteBuffer'
<user defined> 'ZwFreeUserPhysicalPages'
<user defined> 'NtFreeUserPhysicalPages'
<user defined> 'ZwFreeVirtualMemory'
<user defined> 'NtFreeVirtualMemory'
<user defined> 'NtFsControlFile'
<user defined> 'ZwFsControlFile'
<user defined> 'ZwGetContextThread'
<user defined> 'NtGetContextThread'
<user defined> 'NtGetDevicePowerState'
<user defined> 'ZwGetDevicePowerState'
<user defined> 'NtGetPlugPlayEvent'
<user defined> 'ZwGetPlugPlayEvent'
<user defined> 'ZwGetWriteWatch'
<user defined> 'NtGetWriteWatch'
<user defined> 'ZwImpersonateAnonymousToken'
<user defined> 'NtImpersonateAnonymousToken'
<user defined> 'NtImpersonateClientOfPort'
<user defined> 'ZwImpersonateClientOfPort'
<user defined> 'ZwImpersonateThread'
<user defined> 'NtImpersonateThread'
<user defined> 'ZwInitializeRegistry'
<user defined> 'NtInitializeRegistry'
<user defined> 'NtInitiatePowerAction'
<user defined> 'ZwInitiatePowerAction'
<user defined> 'NtIsProcessInJob'
<user defined> 'ZwIsProcessInJob'
<user defined> 'NtIsSystemResumeAutomatic'
<user defined> 'ZwIsSystemResumeAutomatic'
<user defined> 'NtListenPort'
<user defined> 'ZwListenPort'
<user defined> 'ZwLoadDriver'
<user defined> 'NtLoadDriver'
<user defined> 'NtLoadKey'
<user defined> 'ZwLoadKey'
<user defined> 'ZwLoadKey2'
<user defined> 'NtLoadKey2'
<user defined> 'ZwLockFile'
<user defined> 'NtLockFile'
<user defined> 'ZwLockProductActivationKeys'
<user defined> 'NtLockProductActivationKeys'
<user defined> 'ZwLockRegistryKey'
<user defined> 'NtLockRegistryKey'
<user defined> 'ZwLockVirtualMemory'
<user defined> 'NtLockVirtualMemory'
<user defined> 'ZwMakePermanentObject'
<user defined> 'NtMakePermanentObject'
<user defined> 'ZwMakeTemporaryObject'
<user defined> 'NtMakeTemporaryObject'
<user defined> 'NtMapUserPhysicalPages'
<user defined> 'ZwMapUserPhysicalPages'
<user defined> 'NtMapUserPhysicalPagesScatter'
<user defined> 'ZwMapUserPhysicalPagesScatter'
<user defined> 'NtMapViewOfSection'
<user defined> 'ZwMapViewOfSection'
<user defined> 'ZwModifyBootEntry'
<user defined> 'NtModifyBootEntry'
<user defined> 'ZwNotifyChangeDirectoryFile'
<user defined> 'NtNotifyChangeDirectoryFile'
<user defined> 'NtNotifyChangeKey'
<user defined> 'ZwNotifyChangeKey'
<user defined> 'NtNotifyChangeMultipleKeys'
<user defined> 'ZwNotifyChangeMultipleKeys'
<user defined> 'ZwOpenDirectoryObject'
<user defined> 'NtOpenDirectoryObject'
<user defined> 'ZwOpenEvent'
<user defined> 'NtOpenEvent'
<user defined> 'ZwOpenEventPair'
<user defined> 'NtOpenEventPair'
<user defined> 'NtOpenFile'
<user defined> 'ZwOpenFile'
<user defined> 'ZwOpenIoCompletion'
<user defined> 'NtOpenIoCompletion'
<user defined> 'NtOpenJobObject'
<user defined> 'ZwOpenJobObject'
<user defined> 'ZwOpenKey'
<user defined> 'NtOpenKey'
<user defined> 'NtOpenMutant'
<user defined> 'ZwOpenMutant'
<user defined> 'NtOpenObjectAuditAlarm'
<user defined> 'ZwOpenObjectAuditAlarm'
<user defined> 'NtOpenProcess'
<user defined> 'ZwOpenProcess'
<user defined> 'ZwOpenProcessToken'
<user defined> 'NtOpenProcessToken'
<user defined> 'ZwOpenProcessTokenEx'
<user defined> 'NtOpenProcessTokenEx'
<user defined> 'ZwOpenSection'
<user defined> 'NtOpenSection'
<user defined> 'NtOpenSemaphore'
<user defined> 'ZwOpenSemaphore'
<user defined> 'NtOpenSymbolicLinkObject'
<user defined> 'ZwOpenSymbolicLinkObject'
<user defined> 'ZwOpenThread'
<user defined> 'NtOpenThread'
<user defined> 'ZwOpenThreadToken'
<user defined> 'NtOpenThreadToken'
<user defined> 'NtOpenThreadTokenEx'
<user defined> 'ZwOpenThreadTokenEx'
<user defined> 'NtOpenTimer'
<user defined> 'ZwOpenTimer'
<user defined> 'ZwPlugPlayControl'
<user defined> 'NtPlugPlayControl'
<user defined> 'NtPowerInformation'
<user defined> 'ZwPowerInformation'
<user defined> 'ZwPrivilegeCheck'
<user defined> 'NtPrivilegeCheck'
<user defined> 'ZwPrivilegeObjectAuditAlarm'
<user defined> 'NtPrivilegeObjectAuditAlarm'
<user defined> 'NtPrivilegedServiceAuditAlarm'
<user defined> 'ZwPrivilegedServiceAuditAlarm'
<user defined> 'NtProtectVirtualMemory'
<user defined> 'ZwProtectVirtualMemory'
<user defined> 'ZwPulseEvent'
<user defined> 'NtPulseEvent'
<user defined> 'ZwQueryAttributesFile'
<user defined> 'NtQueryAttributesFile'
<user defined> 'NtQueryBootEntryOrder'
<user defined> 'ZwQueryBootEntryOrder'
<user defined> 'ZwQueryBootOptions'
<user defined> 'NtQueryBootOptions'
<user defined> 'NtQueryDebugFilterState'
<user defined> 'ZwQueryDebugFilterState'
<user defined> 'ZwQueryDefaultLocale'
<user defined> 'NtQueryDefaultLocale'
<user defined> 'NtQueryDefaultUILanguage'
<user defined> 'ZwQueryDefaultUILanguage'
<user defined> 'ZwQueryDirectoryFile'
<user defined> 'NtQueryDirectoryFile'
<user defined> 'NtQueryDirectoryObject'
<user defined> 'ZwQueryDirectoryObject'
<user defined> 'NtQueryEaFile'
<user defined> 'ZwQueryEaFile'
<user defined> 'NtQueryEvent'
<user defined> 'ZwQueryEvent'
<user defined> 'ZwQueryFullAttributesFile'
<user defined> 'NtQueryFullAttributesFile'
<user defined> 'NtQueryInformationAtom'
<user defined> 'ZwQueryInformationAtom'
<user defined> 'ZwQueryInformationFile'
<user defined> 'NtQueryInformationFile'
<user defined> 'NtQueryInformationJobObject'
<user defined> 'ZwQueryInformationJobObject'
<user defined> 'ZwQueryInformationPort'
<user defined> 'NtQueryInformationPort'
<user defined> 'NtQueryInformationProcess'
<user defined> 'ZwQueryInformationProcess'
<user defined> 'NtQueryInformationThread'
<user defined> 'ZwQueryInformationThread'
<user defined> 'ZwQueryInformationToken'
<user defined> 'NtQueryInformationToken'
<user defined> 'ZwQueryInstallUILanguage'
<user defined> 'NtQueryInstallUILanguage'
<user defined> 'NtQueryIntervalProfile'
<user defined> 'ZwQueryIntervalProfile'
<user defined> 'NtQueryIoCompletion'
<user defined> 'ZwQueryIoCompletion'
<user defined> 'NtQueryKey'
<user defined> 'ZwQueryKey'
<user defined> 'ZwQueryMultipleValueKey'
<user defined> 'NtQueryMultipleValueKey'
<user defined> 'NtQueryMutant'
<user defined> 'ZwQueryMutant'
<user defined> 'NtQueryObject'
<user defined> 'ZwQueryObject'
<user defined> 'ZwQueryOpenSubKeys'
<user defined> 'NtQueryOpenSubKeys'
<user defined> 'NtQueryPerformanceCounter'
<user defined> 'ZwQueryPerformanceCounter'
<user defined> 'NtQueryQuotaInformationFile'
<user defined> 'ZwQueryQuotaInformationFile'
<user defined> 'ZwQuerySection'
<user defined> 'NtQuerySection'
<user defined> 'ZwQuerySecurityObject'
<user defined> 'NtQuerySecurityObject'
<user defined> 'ZwQuerySemaphore'
<user defined> 'NtQuerySemaphore'
<user defined> 'ZwQuerySymbolicLinkObject'
<user defined> 'NtQuerySymbolicLinkObject'
<user defined> 'NtQuerySystemEnvironmentValue'
<user defined> 'ZwQuerySystemEnvironmentValue'
<user defined> 'ZwQuerySystemEnvironmentValueEx'
<user defined> 'NtQuerySystemEnvironmentValueEx'
<user defined> 'RtlGetNativeSystemInformation'
<user defined> 'NtQuerySystemInformation'
<user defined> 'ZwQuerySystemInformation'
<user defined> 'ZwQuerySystemTime'
<user defined> 'NtQuerySystemTime'
<user defined> 'NtQueryTimer'
<user defined> 'ZwQueryTimer'
Добавлено (13.06.2010, 17:09)
---------------------------------------------
2 часть лога(все не помещается в один пост просто)[cut] <user defined> 'ZwQueryTimerResolution'
<user defined> 'NtQueryTimerResolution'
<user defined> 'NtQueryValueKey'
<user defined> 'ZwQueryValueKey'
<user defined> 'ZwQueryVirtualMemory'
<user defined> 'NtQueryVirtualMemory'
<user defined> 'ZwQueryVolumeInformationFile'
<user defined> 'NtQueryVolumeInformationFile'
<user defined> 'ZwQueueApcThread'
<user defined> 'NtQueueApcThread'
<user defined> 'NtRaiseException'
<user defined> 'ZwRaiseException'
<user defined> 'NtRaiseHardError'
<user defined> 'ZwRaiseHardError'
<user defined> 'ZwReadFile'
<user defined> 'NtReadFile'
<user defined> 'NtReadFileScatter'
<user defined> 'ZwReadFileScatter'
<user defined> 'ZwReadRequestData'
<user defined> 'NtReadRequestData'
<user defined> 'NtReadVirtualMemory'
<user defined> 'ZwReadVirtualMemory'
<user defined> 'ZwRegisterThreadTerminatePort'
<user defined> 'NtRegisterThreadTerminatePort'
<user defined> 'NtReleaseMutant'
<user defined> 'ZwReleaseMutant'
<user defined> 'NtReleaseSemaphore'
<user defined> 'ZwReleaseSemaphore'
<user defined> 'ZwRemoveIoCompletion'
<user defined> 'NtRemoveIoCompletion'
<user defined> 'ZwRemoveProcessDebug'
<user defined> 'NtRemoveProcessDebug'
<user defined> 'ZwRenameKey'
<user defined> 'NtRenameKey'
<user defined> 'ZwReplaceKey'
<user defined> 'NtReplaceKey'
<user defined> 'NtReplyPort'
<user defined> 'ZwReplyPort'
<user defined> 'NtReplyWaitReceivePort'
<user defined> 'ZwReplyWaitReceivePort'
<user defined> 'NtReplyWaitReceivePortEx'
<user defined> 'ZwReplyWaitReceivePortEx'
<user defined> 'ZwReplyWaitReplyPort'
<user defined> 'NtReplyWaitReplyPort'
<user defined> 'ZwRequestDeviceWakeup'
<user defined> 'NtRequestDeviceWakeup'
<user defined> 'NtRequestPort'
<user defined> 'ZwRequestPort'
<user defined> 'NtRequestWaitReplyPort'
<user defined> 'ZwRequestWaitReplyPort'
<user defined> 'NtRequestWakeupLatency'
<user defined> 'ZwRequestWakeupLatency'
<user defined> 'ZwResetEvent'
<user defined> 'NtResetEvent'
<user defined> 'ZwResetWriteWatch'
<user defined> 'NtResetWriteWatch'
<user defined> 'ZwRestoreKey'
<user defined> 'NtRestoreKey'
<user defined> 'ZwResumeProcess'
<user defined> 'NtResumeProcess'
<user defined> 'ZwResumeThread'
<user defined> 'NtResumeThread'
<user defined> 'ZwSaveKey'
<user defined> 'NtSaveKey'
<user defined> 'NtSaveKeyEx'
<user defined> 'ZwSaveKeyEx'
<user defined> 'NtSaveMergedKeys'
<user defined> 'ZwSaveMergedKeys'
<user defined> 'ZwSecureConnectPort'
<user defined> 'NtSecureConnectPort'
<user defined> 'ZwSetBootEntryOrder'
<user defined> 'NtSetBootEntryOrder'
<user defined> 'NtSetBootOptions'
<user defined> 'ZwSetBootOptions'
<user defined> 'ZwSetContextThread'
<user defined> 'NtSetContextThread'
<user defined> 'ZwSetDebugFilterState'
<user defined> 'NtSetDebugFilterState'
<user defined> 'NtSetDefaultHardErrorPort'
<user defined> 'ZwSetDefaultHardErrorPort'
<user defined> 'ZwSetDefaultLocale'
<user defined> 'NtSetDefaultLocale'
<user defined> 'ZwSetDefaultUILanguage'
<user defined> 'NtSetDefaultUILanguage'
<user defined> 'ZwSetEaFile'
<user defined> 'NtSetEaFile'
<user defined> 'NtSetEvent'
<user defined> 'ZwSetEvent'
<user defined> 'ZwSetEventBoostPriority'
<user defined> 'NtSetEventBoostPriority'
<user defined> 'NtSetHighEventPair'
<user defined> 'ZwSetHighEventPair'
<user defined> 'ZwSetHighWaitLowEventPair'
<user defined> 'NtSetHighWaitLowEventPair'
<user defined> 'NtSetInformationDebugObject'
<user defined> 'ZwSetInformationDebugObject'
<user defined> 'ZwSetInformationFile'
<user defined> 'NtSetInformationFile'
<user defined> 'NtSetInformationJobObject'
<user defined> 'ZwSetInformationJobObject'
<user defined> 'ZwSetInformationKey'
<user defined> 'NtSetInformationKey'
<user defined> 'NtSetInformationObject'
<user defined> 'ZwSetInformationObject'
<user defined> 'ZwSetInformationProcess'
<user defined> 'NtSetInformationProcess'
<user defined> 'ZwSetInformationThread'
<user defined> 'NtSetInformationThread'
<user defined> 'NtSetInformationToken'
<user defined> 'ZwSetInformationToken'
<user defined> 'ZwSetIntervalProfile'
<user defined> 'NtSetIntervalProfile'
<user defined> 'ZwSetIoCompletion'
<user defined> 'NtSetIoCompletion'
<user defined> 'NtSetLdtEntries'
<user defined> 'ZwSetLdtEntries'
<user defined> 'NtSetLowEventPair'
<user defined> 'ZwSetLowEventPair'
<user defined> 'NtSetLowWaitHighEventPair'
<user defined> 'ZwSetLowWaitHighEventPair'
<user defined> 'NtSetQuotaInformationFile'
<user defined> 'ZwSetQuotaInformationFile'
<user defined> 'ZwSetSecurityObject'
<user defined> 'NtSetSecurityObject'
<user defined> 'ZwSetSystemEnvironmentValue'
<user defined> 'NtSetSystemEnvironmentValue'
<user defined> 'ZwSetSystemEnvironmentValueEx'
<user defined> 'NtSetSystemEnvironmentValueEx'
<user defined> 'ZwSetSystemInformation'
<user defined> 'NtSetSystemInformation'
<user defined> 'NtSetSystemPowerState'
<user defined> 'ZwSetSystemPowerState'
<user defined> 'ZwSetSystemTime'
<user defined> 'NtSetSystemTime'
<user defined> 'ZwSetThreadExecutionState'
<user defined> 'NtSetThreadExecutionState'
<user defined> 'NtSetTimer'
<user defined> 'ZwSetTimer'
<user defined> 'NtSetTimerResolution'
<user defined> 'ZwSetTimerResolution'
<user defined> 'NtSetUuidSeed'
<user defined> 'ZwSetUuidSeed'
<user defined> 'NtSetValueKey'
<user defined> 'ZwSetValueKey'
<user defined> 'ZwSetVolumeInformationFile'
<user defined> 'NtSetVolumeInformationFile'
<user defined> 'NtShutdownSystem'
<user defined> 'ZwShutdownSystem'
<user defined> 'NtSignalAndWaitForSingleObject'
<user defined> 'ZwSignalAndWaitForSingleObject'
<user defined> 'ZwStartProfile'
<user defined> 'NtStartProfile'
<user defined> 'ZwStopProfile'
<user defined> 'NtStopProfile'
<user defined> 'ZwSuspendProcess'
<user defined> 'NtSuspendProcess'
<user defined> 'NtSuspendThread'
<user defined> 'ZwSuspendThread'
<user defined> 'ZwSystemDebugControl'
<user defined> 'NtSystemDebugControl'
<user defined> 'NtTerminateJobObject'
<user defined> 'ZwTerminateJobObject'
<user defined> 'NtTerminateProcess'
<user defined> 'ZwTerminateProcess'
<user defined> 'ZwTerminateThread'
<user defined> 'NtTerminateThread'
<user defined> 'NtTestAlert'
<user defined> 'ZwTestAlert'
<user defined> 'ZwTraceEvent'
<user defined> 'NtTraceEvent'
<user defined> 'NtTranslateFilePath'
<user defined> 'ZwTranslateFilePath'
<user defined> 'NtUnloadDriver'
<user defined> 'ZwUnloadDriver'
<user defined> 'ZwUnloadKey'
<user defined> 'NtUnloadKey'
<user defined> 'ZwUnloadKeyEx'
<user defined> 'NtUnloadKeyEx'
<user defined> 'ZwUnlockFile'
<user defined> 'NtUnlockFile'
<user defined> 'ZwUnlockVirtualMemory'
<user defined> 'NtUnlockVirtualMemory'
<user defined> 'NtUnmapViewOfSection'
<user defined> 'ZwUnmapViewOfSection'
<user defined> 'ZwVdmControl'
<user defined> 'NtVdmControl'
<user defined> 'ZwWaitForDebugEvent'
<user defined> 'NtWaitForDebugEvent'
<user defined> 'NtWaitForMultipleObjects'
<user defined> 'ZwWaitForMultipleObjects'
<user defined> 'ZwWaitForSingleObject'
<user defined> 'NtWaitForSingleObject'
<user defined> 'ZwWaitHighEventPair'
<user defined> 'NtWaitHighEventPair'
<user defined> 'NtWaitLowEventPair'
<user defined> 'ZwWaitLowEventPair'
<user defined> 'ZwWriteFile'
<user defined> 'NtWriteFile'
<user defined> 'ZwWriteFileGather'
<user defined> 'NtWriteFileGather'
<user defined> 'ZwWriteRequestData'
<user defined> 'NtWriteRequestData'
<user defined> 'NtWriteVirtualMemory'
<user defined> 'ZwWriteVirtualMemory'
<user defined> 'NtYieldExecution'
<user defined> 'ZwYieldExecution'
<user defined> 'NtCreateKeyedEvent'
<user defined> 'ZwCreateKeyedEvent'
<user defined> 'NtOpenKeyedEvent'
<user defined> 'ZwOpenKeyedEvent'
<user defined> 'ZwReleaseKeyedEvent'
<user defined> 'NtReleaseKeyedEvent'
<user defined> 'NtWaitForKeyedEvent'
<user defined> 'ZwWaitForKeyedEvent'
<user defined> 'ZwQueryPortInformationProcess'
<user defined> 'NtQueryPortInformationProcess'
<user defined> 'pow'
<user defined> '_CIpow'
<user defined> 'KiUserApcDispatcher'
<user defined> 'KiUserCallbackDispatcher'
<user defined> 'KiUserExceptionDispatcher'
<user defined> 'KiRaiseUserExceptionDispatcher'
<user defined> 'KiFastSystemCall' = 340FD48B
<user defined> 'KiFastSystemCallRet'
<user defined> 'KiIntSystemCall' = 90C32ECD0824548D
<user defined> 'RtlRaiseException'
<user defined> '_CIcos'
<user defined> 'cos'
<user defined> 'log' = FF8B18EB
<user defined> '_CIlog'
<user defined> 'strstr'
<user defined> 'strchr'
<user defined> 'RtlAnsiStringToUnicodeString'
<user defined> 'RtlMultiByteToUnicodeN'
<user defined> 'RtlNtStatusToDosError'
<user defined> 'RtlNtStatusToDosErrorNoTeb'
<user defined> 'RtlAddRefActivationContext'
<user defined> 'RtlQueryInformationActivationContext'
<user defined> 'RtlGetLastWin32Error'
<user defined> 'RtlRestoreLastWin32Error'
<user defined> 'RtlSetLastWin32Error'
<user defined> 'wcslen'
<user defined> 'RtlInitUnicodeStringEx'
<user defined> 'RtlGetNtGlobalFlags'
<user defined> 'RtlFreeHeap'
<user defined> 'RtlAllocateHeap'
<user defined> 'RtlImageNtHeader'
<user defined> 'RtlImageDirectoryEntryToData'
<user defined> 'RtlUpcaseUnicodeChar'
<user defined> 'RtlAcquirePebLock'
<user defined> 'RtlReleasePebLock'
<user defined> 'RtlFreeUnicodeString'
<user defined> 'RtlFreeAnsiString'
<user defined> 'RtlDllShutdownInProgress'
<user defined> 'RtlSizeHeap'
<user defined> 'RtlReleaseActivationContext'
<user defined> 'wcsncpy'
<user defined> 'RtlDeleteCriticalSection'
<user defined> 'RtlInitializeCriticalSectionAndSpinCount'
<user defined> 'RtlLogStackBackTrace'
<user defined> 'RtlInitializeCriticalSection'
<user defined> 'RtlTimeToTimeFields'
<user defined> 'LdrFindResource_U'
<user defined> 'LdrAccessResource'
<user defined> 'LdrLoadAlternateResourceModule'
<user defined> 'RtlAddressInSectionTable'
<user defined> 'RtlImageRvaToSection'
<user defined> 'RtlUnicodeToMultiByteN'
<user defined> 'RtlUnicodeStringToAnsiString'
<user defined> 'LdrLockLoaderLock'
<user defined> 'LdrUnlockLoaderLock'
<user defined> 'CsrClientCallServer'
<user defined> '_stricmp'
<user defined> '_strcmpi'
<user defined> 'RtlEqualUnicodeString'
<user defined> 'wcscpy'
<user defined> 'RtlValidSid'
<user defined> 'RtlCreateUnicodeStringFromAsciiz'
<user defined> 'RtlIsDosDeviceName_U'
<user defined> 'RtlCopyLuid'
<user defined> 'RtlCopySid'
<user defined> 'RtlLengthSid'
<user defined> 'RtlUnicodeToMultiByteSize'
<user defined> 'RtlLockHeap'
<user defined> 'RtlUnlockHeap'
<user defined> 'RtlIsValidHandle'
<user defined> 'RtlFreeHandle'
<user defined> '_wcsicmp'
<user defined> 'RtlIsValidIndexHandle'
<user defined> 'RtlEncodePointer'
<user defined> 'RtlDecodePointer'
<user defined> 'RtlCreateUnicodeString'
<user defined> 'RtlDetermineDosPathNameType_U'
<user defined> 'RtlDosPathNameToNtPathName_U'
<user defined> 'RtlGetFullPathName_U'
<user defined> 'RtlPrefixUnicodeString'
<user defined> 'RtlGetCurrentDirectory_U'
<user defined> 'RtlQueryEnvironmentVariable_U'
<user defined> 'wcsrchr'
<user defined> 'RtlExpandEnvironmentStrings_U'
<user defined> 'wcschr'
<user defined> 'RtlGetLongestNtPathLength'
<user defined> 'RtlConvertSidToUnicodeString'
<user defined> 'RtlCopyUnicodeString'
<user defined> 'RtlAppendUnicodeToString'
<user defined> 'RtlAppendUnicodeStringToString'
<user defined> 'RtlFormatCurrentUserKeyPath'
<user defined> 'bsearch'
<user defined> 'RtlFindActivationContextSectionString'
<user defined> 'RtlHashUnicodeString'
<user defined> 'RtlDosApplyFileIsolationRedirection_Ustr'
<user defined> 'RtlFindCharInUnicodeString'
<user defined> 'RtlValidateUnicodeString'
<user defined> 'LdrLoadDll'
<user defined> 'LdrGetDllHandle'
<user defined> 'LdrGetDllHandleEx'
<user defined> 'RtlMultiAppendUnicodeStringBuffer'
<user defined> 'RtlDosSearchPath_U'
<user defined> 'LdrUnloadDll'
<user defined> 'RtlActivateActivationContextEx'
<user defined> 'RtlActivateActivationContext'
<user defined> 'RtlDeactivateActivationContext'
<user defined> 'RtlCompareUnicodeString'
<user defined> 'LdrGetProcedureAddress'
<user defined> 'wcscat'
<user defined> 'RtlAnsiCharToUnicodeChar'
<user defined> '_wcsnicmp'
<user defined> 'RtlEqualSid'
<user defined> 'RtlSubAuthoritySid'
<user defined> 'RtlInitializeSid'
<user defined> 'swprintf'
<user defined> 'RtlValidAcl'
<user defined> 'RtlCreateSecurityDescriptor'
<user defined> 'RtlSetDaclSecurityDescriptor'
<user defined> 'RtlFirstFreeAce'
<user defined> 'RtlCreateAcl'
<user defined> 'RtlAddAccessAllowedAce'
<user defined> 'RtlFreeSid'
<user defined> 'RtlAllocateAndInitializeSid'
<user defined> 'RtlSetOwnerSecurityDescriptor'
<user defined> 'RtlSetGroupSecurityDescriptor'
<user defined> 'RtlInitializeBitMap'
<user defined> 'RtlEncodeSystemPointer'
<user defined> 'RtlDecodeSystemPointer'
<user defined> 'RtlOpenCurrentUser'
<user defined> 'wcsncat'
<user defined> 'RtlInitializeHandleTable'
<user defined> 'RtlDosSearchPath_Ustr'
<user defined> 'RtlAllocateHandle'
<user defined> 'RtlSetUserValueHeap'
<user defined> 'RtlGetVersion'
<user defined> 'RtlGetNtProductType'
<user defined> '_strnicmp'
<user defined> 'LdrUnloadAlternateResourceModule'
<user defined> 'RtlDoesFileExists_U'
<user defined> 'RtlPopFrame'
<user defined> 'RtlPushFrame'
<user defined> 'RtlReAllocateHeap'
<user defined> 'RtlGetUserInfoHeap'
<user defined> 'RtlCheckForOrphanedCriticalSections'
<user defined> 'RtlTimeFieldsToTime'
<user defined> 'RtlIntegerToChar'
<user defined> 'RtlIntegerToUnicodeString'
<user defined> 'RtlUnicodeStringToInteger'
<user defined> 'CsrNewThread'
<user defined> 'RtlpWaitForCriticalSection'
<user defined> 'RtlpUnWaitCriticalSection'
<user defined> '_snwprintf'
<user defined> 'LdrFindResourceDirectory_U'
<user defined> 'RtlGetActiveActivationContext'
<user defined> 'LdrQueryImageFileExecutionOptions'
<user defined> 'RtlAppendPathElement'
<user defined> 'LdrDisableThreadCalloutsForDll'
<user defined> 'RtlpEnsureBufferSize'
<user defined> 'RtlEnumerateGenericTableWithoutSplaying'
<user defined> 'RtlRealSuccessor'
<user defined> 'RtlIsGenericTableEmpty'
<user defined> 'CsrCaptureMessageBuffer'
<user defined> 'wcsncmp'
Добавлено (13.06.2010, 17:11)
---------------------------------------------
3-я часть лога[cut] <user defined> 'RtlInitializeResource'
<user defined> 'RtlSetCurrentDirectory_U'
<user defined> 'vDbgPrintExWithPrefix'
<user defined> 'DbgPrintEx'
<user defined> 'CsrFreeCaptureBuffer'
<user defined> 'CsrAllocateCaptureBuffer'
<user defined> 'CsrAllocateMessagePointer'
<user defined> 'LdrFindCreateProcessManifest'
<user defined> 'LdrCreateOutOfProcessImage'
<user defined> 'LdrDestroyOutOfProcessImage'
<user defined> 'vDbgPrintEx'
<user defined> 'RtlReleaseMemoryStream'
<user defined> 'qsort'
<user defined> 'RtlGetFrame'
<user defined> 'RtlpApplyLengthFunction'
<user defined> 'RtlReadOutOfProcessMemoryStream'
<user defined> 'RtlAddRefMemoryStream'
<user defined> 'RtlQueryInterfaceMemoryStream'
<user defined> 'CsrCaptureMessageMultiUnicodeStringsInPlace'
<user defined> 'CsrCaptureMessageString'
<user defined> 'RtlGetLengthWithoutLastFullDosOrNtPathElement'
<user defined> 'LdrAccessOutOfProcessResource'
<user defined> 'RtlInitOutOfProcessMemoryStream'
<user defined> 'RtlStatMemoryStream'
<user defined> 'RtlCreateActivationContext'
<user defined> 'RtlFinalReleaseOutOfProcessMemoryStream'
<user defined> 'RtlSplay'
<user defined> 'RtlDuplicateUnicodeString'
<user defined> 'RtlLookupElementGenericTable'
<user defined> 'CsrClientConnectToServer'
<user defined> 'RtlGetNtVersionNumbers'
<user defined> 'LdrEnumerateLoadedModules'
<user defined> 'RtlInitializeGenericTable'
<user defined> 'RtlReadMemoryStream'
<user defined> 'RtlInitMemoryStream'
<user defined> 'LdrSetDllManifestProber'
<user defined> 'RtlInitializeAtomPackage'
<user defined> 'RtlCreateTagHeap'
<user defined> 'RtlSetThreadPoolStartFunc'
<user defined> 'RtlNormalizeProcessParams'
<user defined> 'RtlResetRtlTranslations'
<user defined> 'RtlInitNlsTables'
<user defined> 'RtlInitCodePageTable'
<user defined> 'RtlDestroyProcessParameters'
<user defined> 'RtlDeNormalizeProcessParams'
<user defined> 'RtlCreateProcessParameters'
<user defined> 'wcsstr'
<user defined> 'RtlDestroyEnvironment'
<user defined> 'RtlDestroyHandleTable'
<user defined> 'RtlNumberGenericTableElements'
<user defined> 'LdrShutdownProcess'
<user defined> 'RtlDeleteResource'
<user defined> 'toupper'
<user defined> 'RtlUpcaseUnicodeToMultiByteN'
<user defined> 'RtlNtPathNameToDosPathName'
<user defined> '_wcslwr'
<user defined> 'atoi'
<user defined> 'atol'
<user defined> 'mbstowcs'
<user defined> 'RtlInsertElementGenericTable'
<user defined> 'RtlSubtreePredecessor'
<user defined> 'RtlDeleteElementGenericTable'
<user defined> 'RtlDelete'
<user defined> 'RtlConsoleMultiByteToUnicodeN'
<user defined> 'sprintf'
<user defined> 'RtlCreateHeap'
<user defined> 'RtlFindClearBits'
<user defined> 'RtlFindClearBitsAndSet'
<user defined> 'RtlSetBits'
<user defined> 'RtlDestroyHeap'
<user defined> 'RtlClearBits'
<user defined> 'RtlAreBitsSet'
<user defined> 'iswctype'
<user defined> 'iswdigit'
<user defined> 'RtlUpcaseUnicodeString'
<user defined> 'RtlGUIDFromString'
<user defined> 'RtlUnicodeToOemN'
<user defined> 'RtlUnicodeStringToOemString'
<user defined> 'RtlOemToUnicodeN'
<user defined> 'RtlOemStringToUnicodeString'
<user defined> 'RtlSetEnvironmentVariable'
<user defined> 'RtlQueueWorkItem'
<user defined> 'RtlFindActivationContextSectionGuid'
<user defined> 'RtlStringFromGUID'
<user defined> 'RtlIsTextUnicode'
<user defined> 'RtlMultiByteToUnicodeSize'
<user defined> 'RtlUpperChar'
<user defined> 'RtlFormatMessage'
<user defined> 'RtlpNtQueryValueKey'
<user defined> 'RtlpNtOpenKey'
<user defined> 'RtlMakeSelfRelativeSD'
<user defined> 'RtlAbsoluteToSelfRelativeSD'
<user defined> 'RtlAddAccessAllowedAceEx'
<user defined> 'RtlAdjustPrivilege'
<user defined> 'RtlDowncaseUnicodeString'
<user defined> 'towlower'
<user defined> 'RtlCharToInteger'
<user defined> 'RtlInterlockedPushEntrySList'
<user defined> 'RtlInterlockedPopEntrySList'
<user defined> 'RtlQueryDepthSList'
<user defined> 'RtlPcToFileHeader'
<user defined> 'RtlAddAtomToAtomTable'
<user defined> 'RtlCreateAtomTable'
<user defined> 'RtlQueryAtomInAtomTable'
<user defined> 'VerSetConditionMask'
<user defined> 'RtlVerifyVersionInfo'
<user defined> 'wcscspn'
<user de