文本字串参考位于 ntdll:.text
地? 反汇? 文本字串
7C9  retn   (初始 CPU 选择)
7C9  add    UNICODE "USERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    ASCII "Actx "
7C9  push   ASCII "RtlLockHeap"
7C9  push   ASCII "RtlUnlockHeap"
7C9  push   UNICODE "S-1-"
7C9  push   UNICODE "\REGISTRY\USER\"
7C9  mov    UNICODE "Kernel32.dll"
7C9  mov    UNICODE ".dll"
7C9  mov    ASCII "Refcount"
7C9  mov    ASCII "Derefcount"
7C9  mov    ASCII "Refcount"
7C9  mov    ASCII "Derefcount"
7C9  push   UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\"
7C9  imul   UNICODE "Find ASCII"
7C9  push   ASCII "secserv.dll"
7C9  push   UNICODE "CheckAppHelp"
7C9  push   ASCII ".aspack"
7C9  push   ASCII ".pcle"
7C9  push   ASCII ".sforce"
7C9  push   ASCII "LDR"
7C9  push   ASCII "SXS: Assembly storage resolution trying %Id roots (-1 is ok)",LF
7C9  push   ASCII "SXS: Storage resolution for root number %lu returned blank root; skipping probing logic and moving to next.",LF
7C9  push   ASCII "SXS: Getting assembly storage root #%Iu",LF
7C9  mov    UNICODE ".Local\"
7C9  push   ASCII "SXS: Assembly storage map probing root %wZ for assembly directory %wZ",LF
7C9  push   ASCII "SXS: Found good storage root for %wZ at index %Iu",LF
7C9  imul   UNICODE "Find ASCII"
7C9  push   ASCII "SXS: RtlCreateActivationContext() called with parameters:",LF,"   Flags = 0x%08lx",LF,"   ActivationContextData = %p",LF,"   ExtraBytes = %lu",LF,"   NotificationRoutine = %p",LF,"   NotificationContext = %p",LF,"   ActCtx = %p",LF
7C9  cmp    ASCII "Actx "
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "SXS: Activation context data at %p has invalid TOC header offset",LF
7C9  push   ASCII "SXS: Activation context data at %p has invalid assembly roster offset",LF
7C9  mov    ASCII "BaseProcessInitPostImport"
7C9  mov    ASCII "BaseQueryModuleData"
7C9  push   UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "!Process"
7C9  push   UNICODE "NTDLL!"
7C9  push   UNICODE "C:\WINDOWS"
7C9  mov    UNICODE "C:\WINDOWS\system32\ntdll.dll"
7C9  push   UNICODE "\system32\"
7C9  push   UNICODE "\KnownDlls"
7C9  push   UNICODE "KnownDllPath"
7C9  mov    UNICODE "C:\WINDOWS\system32"
7C9  push   UNICODE ".Local"
7C9  mov    UNICODE "kernel32.dll"
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "\KernelObjects\CritSecOutOfMemoryEvent"
7C9  push   UNICODE "ApiPort"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "!CSRPORT"
7C9  push   UNICODE "CSRPORT!"
7C9  push   ASCII "BoG_ *90.0&!!  Yy>"
7C9  push   ASCII "stxt371"
7C9  push   ASCII ".txt"
7C9  push   ASCII ".txt2"
7C9  push   UNICODE "\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"
7C9  imul   UNICODE "Find ASCII"
7C9  imul   UNICODE "Find ASCII"
7C9  push   UNICODE "_COMPAT_VER_NNN"
7C9  push   ASCII "SE_InstallBeforeInit"
7C9  push   ASCII "SE_InstallAfterInit"
7C9  push   ASCII "SE_DllLoaded"
7C9  push   ASCII "SE_DllUnloaded"
7C9  push   ASCII "SE_GetProcAddress"
7C9  push   ASCII "SE_ProcessDying"
7C9  push   UNICODE "\\.\"
7C9  push   UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
7C9  push   UNICODE "{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}"
7C9  push   UNICODE "%s"
7C9  push   UNICODE ".dll"
7C9  push   UNICODE "\??\"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "%d"
7C9  push   ASCII "%d"
7C9  imul   UNICODE "Find ASCII"
7C9  push   UNICODE "%u.%u.%u.%u"
7C9  push   ASCII "LdrLoadDll"
7C9  push   ASCII "LDR: %s - failing because LdrpLoadDll(%wZ) returned status %x",LF
7C9  push   ASCII "LdrpLoadDll"
7C9  push   ASCII "LDR: %s - Exception %08lx thrown running initialization routines for %wZ",LF
7C9  push   ASCII "LdrpLoadDll"
7C9  push   ASCII "LDR: exception %08lx thrown within function %s",LF,"   Exception record: %p",LF,"   Context record: %p",LF
7C9  push   ASCII "   Context->Eip = %p",LF,"   Context->Ebp = %p",LF,"   Context->Esp = %p",LF
7C9  push   UNICODE "RXACT"
7C9  push   UNICODE "Log"
7C9  push   UNICODE "\SystemRoot"
7C9  push   UNICODE "\bootstat.dat"
7C9  push   ASCII "csrsrv"
7C9  push   ASCII "CsrCallServerFromServer"
7C9  push   UNICODE "CAPTURE"
7C9  push   UNICODE "CSRPORT!"
7C9  push   UNICODE "Log"
7C9  push   UNICODE "C:\WINDOWS"
7C9  mov    UNICODE "mscoree.dll"
7C9  mov    ASCII "Refcount"
7C9  mov    UNICODE "\??\"
7C9  push   UNICODE "hs"
7C9  push   ASCII "RtlpSerializeHeap"
7C9  push   ASCII "CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions",LF
7C9  push   UNICODE "ExecuteOptions"
7C9  push   ASCII "CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database",LF
7C9  push   UNICODE "Execute=1"
7C9  push   ASCII "CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ",LF
7C9  mov    UNICODE ".Local"
7C9  push   UNICODE "%s"
7C9  push   UNICODE "%%%u"
7C9  mov    ASCII "Refcount"
7C9  push   ASCII "LDR: Tls Found in %wZ at %p",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid flags (%08x) specified to RtlCreateHeap",LF
7C9  push   ASCII "LDR: LdrpWalkImportDescriptor() failed to probe %wZ for its manifest, ntstatus 0x%08lx",LF
7C9  push   ASCII "LdrpRunInitializeRoutines"
7C9  push   ASCII "LDR: %s - failed to allocate dynamic array of %u DLL initializers to run",LF
7C9  push   ASCII "[%x,%x] LDR: Real INIT LIST for process %wZ pid %u 0x%x",LF
7C9  push   ASCII "[%x,%x]    %wZ init routine %p",LF
7C9  push   UNICODE "BreakOnDllLoad"
7C9  push   ASCII "LDR: %wZ loaded."
7C9  push   ASCII " - About to call init routine at %p",LF
7C9  push   ASCII "[%x,%x] LDR: %wZ loaded"
7C9  push   ASCII " - Calling init routine at %p",LF
7C9  push   ASCII "[%x,%x] LDR: calling init routine %p for DLL_PROCESS_ATTACH",LF
7C9  push   ASCII "[%x,%x] LDR: DLL_PROCESS_ATTACH for dll ""%wZ"" (InitRoutine: %p) failed",LF
7C9  push   ASCII "LdrpSnapIAT"
7C9  push   ASCII "LdrpSnapIAT"
7C9  push   ASCII "LDR: %s - caught exception %08lx snapping thunks (#1)",LF
7C9  push   ASCII "LdrpSnapIAT"
7C9  push   ASCII "LdrpSnapIAT"
7C9  push   ASCII "LDR: %s - caught exception %08lx snapping thunks (#2)",LF
7C9  push   ASCII "[%lx,%lx] LDR: Recursive DLL load",LF
7C9  push   ASCII "[%lx,%lx]   Previous DLL being loaded: ""%wZ""",LF
7C9  push   ASCII "[%lx,%lx]   DLL being requested: ""%wZ""",LF
7C9  push   ASCII "[%lx,%lx]   DLL whose initializer was currently running: ""%wZ""",LF
7C9  push   ASCII "[%lx,%lx]   No DLL initializer was running",LF
7C9  push   ASCII "LDR: TlsVector %x Index %d = %x copied from %x to %x",LF
7C9  push   ASCII "LDR: Tls Callbacks Found. Imagebase %p Tls %p CallBacks %p",LF
7C9  push   ASCII "LDR: Calling Tls Callback Imagebase %p Function %p",LF
7C9  push   ASCII "LdrpCallTlsInitializers"
7C9  push   ASCII "LdrpCallTlsInitializers"
7C9  push   ASCII "LDR: %s - caught exception %08lx calling TLS callbacks",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Failed to initialize a new segment (%x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Abandoning uncommitted range (%x for %x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Failing creating uncommitted range (%x for %x)",LF
7C9  push   ASCII ".txt"
7C9  push   ASCII ".txt2"
7C9  push   ASCII "CLIENT(ntdll): Processing %ws for patching section protection for %wZ",LF
7C9  push   ASCII "CLIENT(ntdll): Processing section info %ws...",LF
7C9  push   ASCII "LDR: LdrGetProcedureAddress by "
7C9  push   ASCII "NAME - %s",LF
7C9  push   ASCII "ORDINAL - %lx",LF
7C9  push   ASCII "LdrpGetProcedureAddress"
7C9  push   ASCII "LdrpGetProcedureAddress"
7C9  push   ASCII "LDR: %s - Exception %x thrown by LdrpRunInitializeRoutines",LF
7C9  push   ASCII "LdrVerifyImageMatchesChecksum"
7C9  push   ASCII "LdrVerifyImageMatchesChecksum"
7C9  push   ASCII "LDR: %s - caught exception %08lx while checking image checksums",LF
7C9  push   ASCII "LdrpSendDllUnloadedNotifications"
7C9  push   ASCII "LdrpSendDllLoadedNotifications"
7C9  push   ASCII "LdrLockLoaderLock"
7C9  push   ASCII "LdrLockLoaderLock"
7C9  push   ASCII "LDR: %s - Caught exception %08lx",LF
7C9  push   ASCII "LdrUnlockLoaderLock"
7C9  push   ASCII "LdrEnumerateLoadedModules"
7C9  push   ASCII "LDR: LdrGetDllHandle, searching for %ws from %ws",LF
7C9  push   ASCII "LDR: UNINIT LIST",LF
7C9  push   ASCII "          (%d) [%ws] %ws (%lx) deinit %lx",LF
7C9  push   ASCII "LDR: Unmapping [%ws]",LF
7C9  push   ASCII "LDR: Calling deinit %lx",LF
7C9  push   ASCII "LdrUnloadDll"
7C9  push   ASCII "LdrUnloadDll"
7C9  push   ASCII "LDR: %s - exception %08lx caught while sending DLL_PROCESS_DETACH",LF
7C9  push   ASCII "   Dll Name: %wZ",LF
7C9  push   ASCII "   InitRoutine: %p",LF
7C9  push   ASCII "LdrpLoadDll"
7C9  push   ASCII "LDR: %s - Dll name missing extension; with extension added the length is too long",LF,"   DllName: (@ %p) ""%wZ""",LF,"   DllName->Length: %u",LF
7C9  push   ASCII "LDR: LdrLoadDll, loading %ws from %ws",LF
7C9  push   ASCII "LdrpLoadDll"
7C9  push   ASCII "LdrpLoadDll"
7C9  push   ASCII "LDR: %s - Exception %x thrown by LdrpWalkImportDescriptor",LF
7C9  push   ASCII "LDR: Unloading %wZ due to error %x walking import descriptors",LF
7C9  push   ASCII "LDR: Unloading %wZ because either its init routine or one of its static imports failed; status = 0x%08lx"
7C9  push   ASCII "LDR: failed to load mscoree.dll, status=%x",LF
7C9  push   UNICODE "ExecuteOptions"
7C9  push   UNICODE "DisableHeapLookaside"
7C9  push   UNICODE "ShutdownFlags"
7C9  push   UNICODE "MinimumStackCommitInBytes"
7C9  push   UNICODE "GlobalFlag"
7C9  push   UNICODE "_NO_DEBUG_HEAP"
7C9  push   ASCII "LDR: PID: 0x%x finished - '%wZ'",LF
7C9  push   UNICODE "ApplicationGoo"
7C9  push   UNICODE "ApplicationGoo"
7C9  push   ASCII "LdrQueryApplicationCompatibilityGoo"
7C9  push   ASCII "LdrQueryApplicationCompatibilityGoo"
7C9  push   ASCII "LdrQueryApplicationCompatibilityGoo"
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failing because we were unable to map the image base address (%p) to the PIMAGE_NT_HEADERS",LF
7C9  push   ASCII "LDR: PID: 0x%x started - '%wZ'",LF
7C9  push   UNICODE "StackTraceDatabaseSizeInMb"
7C9  push   ASCII "LDR: Stack trace database size is %u Mb ",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - unable to create process heap",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s failing process initialization due to inability to create loader private heap.",LF
7C9  push   UNICODE "DebugProcessHeapOnly"
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failed call to NtQuerySymbolicLinkObject with status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - unable to allocate current working directory buffer",LF
7C9  push   UNICODE "C:\WINDOWS"
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failed to allocate PEB_LDR_DATA",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failing process initialization due to inability allocate ""%wZ""'s LDR_DATA_TABLE_ENTRY",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failing process initialization due to inability to allocate NTDLL's LDR_DATA_TABLE_ENTRY",LF
7C9  push   ASCII "LDR: NEW PROCESS",LF
7C9  push   ASCII "     Image Path: %wZ (%wZ)",LF
7C9  push   ASCII "     Current Directory: %wZ",LF
7C9  push   ASCII "     Search Path: %wZ",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - unable to set current directory to ""%wZ""; status = %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - unable to set current directory to NtSystemRoot; status = %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - unable to allocate heap for the image's .local path",LF
7C9  push   ASCII "LDR: Unable to load kernel32.dll.  Status=%x",LF
7C9  push   ASCII "LDR: Failed to find post-import process init function in kernel32; ntstatus 0x%08lx",LF
7C9  push   ASCII "LDR: Failed to find BaseQueryModuleData in kernel32; ntstatus 0x%08lx",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - call to LdrpWalkImportDescriptor failed with status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - call to LdrpSetProtection(%p, FALSE, TRUE) failed with status %x",LF
7C9  push   ASCII "LDR"
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - call to LdrRelocateImage failed with status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - call to LdrpSetProtection(%p, TRUE, TRUE) failed with status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failed to initialize TLS slots; status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - Failed running kernel32 post-import function; status 0x%08lx",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - Failed running initialization routines; status %x",LF
7C9  push   ASCII "LdrpInitializeProcess"
7C9  push   ASCII "LDR: %s - failed call to NtOpenSymbolicLinkObject with status %x",LF
7C9  push   UNICODE "ini etkinle"
7C9  push   ASCII "_LdrpInitialize"
7C9  push   ASCII "LDR: ***NONFATAL*** %s - call to NtDelayExecution waiting on loader lock failed; ntstatus = %x",LF
7C9  push   ASCII "_LdrpInitialize"
7C9  push   ASCII "LDR: %s - Call to NtQueryVirtualMemory failed with ntstaus %x",LF
7C9  push   ASCII "_LdrpInitialize"
7C9  push   ASCII "LDR: %s - call to LdrpInitializeProcess() failed with ntstatus %x",LF
7C9  push   ASCII "LDR: Failing LdrpCheckForLoadedDll because redirected DLL name %wZ does not include a slash",LF
7C9  push   ASCII "LDR: LdrpCheckForLoadedDll - Unable To Locate "
7C9  push   ASCII "%ws from %ws",LF
7C9  push   ASCII "LDR: LdrpCheckForLoadedDll - Failing load of "
7C9  push   ASCII "%wZ from %ws"
7C9  push   ASCII " because path search required %u bytes",LF
7C9  push   ASCII "LDR: LdrpCheckForLoadedDll - Failing load of %wZ because we could not dynamically allocate its full dll path buffer",LF
7C9  push   ASCII "LDR: LdrpCheckForLoadedDll - Failing load of %wZ because searching path into dynamic buffer failed; buffer size: returned length: %lu",LF
7C9  push   ASCII "LdrpCheckForLoadedDll"
7C9  push   ASCII "LdrpCheckForLoadedDll"
7C9  push   ASCII "LDR: %s - Caught exception %08lx",LF
7C9  push   ASCII "LdrpCreateDllSection"
7C9  push   ASCII "LDR: %s - NtOpenFile failed; status = %x",LF
7C9  push   ASCII "LDR: Loading of (%wZ) blocked by WinSafer",LF
7C9  mov    ASCII "Pin"
7C9  mov    ASCII "Derefcount"
7C9  push   ASCII "LDR: %s %wZ (%lx)",LF
7C9  mov    ASCII "Pin"
7C9  push   ASCII "LDR: %s %wZ (%lx)",LF
7C9  mov    ASCII "Pin"
7C9  mov    ASCII "Derefcount"
7C9  push   ASCII "LDR: %s %wZ (%lx)",LF
7C9  mov    ASCII "Pin"
7C9  push   ASCII "LDR: %s %wZ (%lx)",LF
7C9  push   ASCII "LdrpResolveDllNameForAppPrivateRedirection"
7C9  push   ASCII "LDR: %s call to RtlComputePrivatizedDllName_U() failed with status %lx",LF
7C9  push   ASCII "LdrpResolveDllNameForAppPrivateRedirection"
7C9  push   ASCII "LDR: %s calling LdrpCopyUnicodeString() failed; exiting with status %lx",LF
7C9  push   ASCII "LdrpResolveDllNameForAppPrivateRedirection"
7C9  push   ASCII "LDR: %s calling LdrpCopyUnicodeString() failed; exiting with status %lx",LF
7C9  mov    ASCII "Unknown"
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s failed calling LdrpResolveDllNameForAppPrivateRediretion with status %lx",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s failed call to LdrpCopyUnicodeString() in redirected case; status = %lx",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s - call to RtlDosSearchPath_U failed",LF
7C9  push   ASCII "   DllName: ""%ws""",LF
7C9  push   ASCII "   Path: ""%ws""",LF
7C9  push   ASCII "LDR: LdrResolveDllName - Failing resolution because found path too long (%u bytes; max is %u bytes)",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s - failed to allocate string for full dll name; length requested: %u",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s - call to RtlDosSearchPath_U failed",LF
7C9  push   ASCII "   DllName: ""%ws""",LF
7C9  push   ASCII "   Path: ""%ws""",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s - Required path length required for %ws changed from %lu to %lu; try launching the app again.",LF
7C9  push   ASCII "LdrpResolveDllName"
7C9  push   ASCII "LDR: %s - failing because RtlFindCharInUnicodeString failed with status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - call back to app compat redirection function @ %p (cb data: %p) failed with status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - call to LdrpCheckForKnownDll(""%ws"", ...) failed with status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - call to LdrpResolveDllName on dll ""%ws"" failed with status %x",LF
7C9  mov    ASCII "STATIC"
7C9  mov    ASCII "DYNAMIC"
7C9  mov    ASCII "REDIRECTED"
7C9  mov    ASCII "NON_REDIRECTED"
7C9  push   ASCII "LDR: Loading (%s, %s) %wZ",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - call to RtlDosPathNameToNtPathName_U on path ""%wZ"" failed; returning status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - LdrpCreateDllSection (%wZ) failed with status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - failed to map view of section; status = %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - unable to map ViewBase (%p) to image headers; failing with status %x",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "LDR: %s - failed to allocate new data table entry for %p",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "[%x,%x] LDR: Failed to map view of section; ntstatus = %x",LF
7C9  push   ASCII "LDR: Fixups unsuccessfully re-applied @ %p",LF
7C9  push   ASCII "LDR: Fixups successfully re-applied @ %p",LF
7C9  push   ASCII "LdrpMapDll"
7C9  push   ASCII "[%x,%x] LDR: %s - NtMapViewOfSection on no reloc needed dll failed with status %x",LF
7C9  push   ASCII "LDR: Fixups won't be re-applied to non-Dll @ %p",LF
7C9  push   UNICODE ".dll"
7C9  push   ASCII "LdrpLoadImportModule"
7C9  push   ASCII "LDR: %s - RtlDosApplyFileIsolationRedirection_Ustr failed with status %x",LF
7C9  push   ASCII "LdrpLoadImportModule"
7C9  push   ASCII "LDR: %s - LdrpMapDll(%p, %ls, NULL, TRUE, %d, %p) failed with status %x",LF
7C9  push   ASCII "LdrpLoadImportModule"
7C9  push   ASCII "LDR: %s - LdrpWalkImportDescriptor [dll %ls]  failed with status %x",LF
7C9  push   ASCII "LDR: %wZ bound to %s",LF
7C9  push   ASCII "LDR: %wZ failed to load import module %s; status = %x",LF
7C9  push   ASCII "LDR: %wZ has correct binding to %s",LF
7C9  push   ASCII "LDR: %wZ has stale binding to %s",LF
7C9  push   ASCII "LDR: %wZ bound to %s via forwarder(s) from %wZ",LF
7C9  push   ASCII "LDR: %wZ has correct binding to %s",LF
7C9  push   ASCII "LDR: %wZ has stale binding to %s",LF
7C9  push   ASCII "LDR: LdrpWalkImportTable - failing with STATUS_OBJECT_NAME_INVALID due to no import descriptor name",LF
7C9  push   ASCII "LDR: Stale Bind %s from %wZ",LF
7C9  push   ASCII "LDR: LdrpWalkImportTable - LdrpSnapIAT failed with status %x",LF
7C9  push   ASCII "LDR: %s used by %wZ",LF
7C9  push   ASCII "LDR: LdrpWalkImportTable - LdrpLoadImportModule failed on import %s with status %x",LF
7C9  push   ASCII "LDR: Snapping imports for %wZ from %s",LF
7C9  push   ASCII "LDR: LdrpWalkImportTable - LdrpSnapIAT #2 failed with status %x",LF
7C9  push   ASCII 0A,"***Excepti"
7C9  push   ASCII "Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? "
7C9  push   ASCII "Execute '.cxr %p' to dump context",LF
7C9  push   ASCII "RTL: Acquire Shared Sem Timeout %d(%I64u secs)",LF
7C9  push   ASCII "RTL: Resource at %p",LF
7C9  push   ASCII "RTL: Re-Waiting",LF
7C9  push   ASCII "RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)",LF
7C9  push   ASCII "RTL: Resource at %p",LF
7C9  push   ASCII "RTL: Re-Waiting",LF
7C9  push   ASCII "RTL: Convert Exclusive Sem Timeout %d (%I64u secs)",LF
7C9  push   ASCII "RTL: Resource at %p",LF
7C9  push   ASCII "RTL: Re-Waiting",LF
7C9  push   ASCII "RTL: Enter Critical Section Timeout (%I64u secs) %d",LF
7C9  push   ASCII "RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu",LF
7C9  push   ASCII "RTL: Re-Waiting",LF
7C9  push   ASCII "Initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Critical section debug info address"
7C9  push   ASCII "Critical section address"
7C9  push   ASCII "undeleted critical section in freed memory"
7C9  push   ASCII "Initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Address of the debug info found in the active list."
7C9  push   ASCII "Invalid debug info address of this critical section"
7C9  push   ASCII "Critical section address"
7C9  push   ASCII "corrupted critical section"
7C9  push   ASCII "Second initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "First initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Address of the debug info found in the active list."
7C9  push   ASCII "Critical section address."
7C9  push   ASCII "double initialized or corrupted critical section"
7C9  push   ASCII "Initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Critical section debug info address"
7C9  push   ASCII "Critical section address"
7C9  push   ASCII "Thread identifier"
7C9  push   ASCII "Thread is terminated while owning a critical section"
7C9  push   ASCII "Heap block size"
7C9  push   ASCII "Heap block address"
7C9  push   ASCII "Initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Critical section address"
7C9  push   ASCII "releasing heap allocation containing active critical section"
7C9  push   ASCII "DLL base address"
7C9  push   ASCII "DLL name address (use `du ADDRESS' to dump if not null)"
7C9  push   ASCII "Initialization stack trace. Use dds to dump it if non-NULL."
7C9  push   ASCII "Critical section address"
7C9  push   ASCII "unloading dll containing active critical section"
7C9  push   ASCII "SXS: Warning: Activation context data at %p missing default TOC",LF
7C9  push   ASCII "SXS: Warning: Activation context data at %p lacks assembly roster",LF
7C9  push   ASCII "SXS: Activation context data at %p has TOC header too small (%lu)",LF
7C9  push   ASCII "SXS: Activation context data at %p has invalid TOC entry array offset",LF
7C9  push   ASCII "SXS: Activation context data at %p has assembly roster header too small (%lu)",LF
7C9  push   ASCII "RtlCreateActivationContext"
7C9  push   ASCII "SXS: %s() passed the empty activation context data",LF
7C9  push   ASCII "RtlDeactivateActivationContext"
7C9  push   ASCII "SXS: %s() called with invalid flags 0x%08lx",LF
7C9  push   ASCII "RtlDeactivateActivationContext"
7C9  push   ASCII "SXS: %s() called with invalid cookie type 0x%08I64x",LF
7C9  push   ASCII "RtlDeactivateActivationContext"
7C9  push   ASCII "SXS: %s() called with invalid cookie tid 0x%08I64x - should be %08lx",LF
7C9  push   ASCII "RtlDeactivateActivationContextUnsafeFast"
7C9  push   ASCII "SXS: %s() Active frame is not the frame being deactivated %p != %p",LF
7C9  push   ASCII "SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)",LF
7C9  push   ASCII "SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)",LF
7C9  push   ASCII "SXS/RTL: Extended TOC offset (%ld) is outside bounds of activation context data (%lu bytes)",LF
7C9  push   ASCII "SXS/RTL: Section found (offset %ld; length %lu) extends past end of activation context data (%lu bytes)",LF
7C9  push   ASCII "SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)",LF
7C9  push   ASCII "SXS/RTL: Activation context data at %p too small; TotalSize = %lu; HeaderSize = %lu",LF
7C9  push   ASCII "RtlpFindActivationContextSection_CheckParameters"
7C9  push   ASCII "SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0x%08lx.",LF
7C9  push   ASCII "RtlpFindActivationContextSection_CheckParameters"
7C9  push   ASCII "SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0x%08lx.",LF
7C9  push   ASCII "RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.",LF
7C9  push   ASCII "SXS: String hash collision chain offset at %p (= %ld) out of bounds",LF
7C9  push   ASCII "SXS: String hash table entry at %p has invalid key offset (= %ld)",LF,"   Header = %p; Index = %lu; Bucket = %p; Chain = %p",LF
7C9  push   ASCII "RtlFindActivationContextSectionString() found section at %p (length %lu) which is not a string section",LF
7C9  push   ASCII "RtlFindActivationContextSectionGuid() found section at %p (length %lu) which is not a GUID section",LF
7C9  push   ASCII "RtlpQueryInformationActivationContextBasicInformation"
7C9  push   ASCII "SXS: %s() received invalid non-zero sub-instance index %lu",LF
7C9  push   ASCII "RtlpQueryInformationActivationContextDetailedInformation"
7C9  push   ASCII "SXS: %s() received invalid non-zero sub-instance index %lu",LF
7C9  push   ASCII "RtlpQueryInformationActivationContextDetailedInformation"
7C9  push   ASCII "SXS: %s() found activation context data at %p with assembly roster that has no root",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller passed meaningless flags/class combination (0x%08lx/0x%08lx)",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - caller asked for unknown information class %lu",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - caller supplied no buffer to populate and no place to return required byte count",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller passed invalid flags (0x%08lx)",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller passed invalid address, not in any .dll (%p)",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller asked to use activation context from hmodule but passed NULL",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - Caller passed invalid hmodule (%p)",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - caller asked to use active activation context but passed %p",LF
7C9  push   ASCII "RtlQueryInformationActivationContext"
7C9  push   ASCII "SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu",LF
7C9  push   ASCII "SXS: Unable to expand %%SystemRoot%%\WinSxS\ Status = 0x08lx",LF
7C9  push   ASCII "SXS: Unable to enumerate assembly storage subkey #%lu Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Attempt to get storage location from subkey %wZ failed; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Unable to open registry key %wZ Status = 0x%08lx",LF
7C9  push   ASCII "SXS: %s() bad parameters:",LF,"SXS:    Map        : 0x%lx",LF,"SXS:    EntryCount : 0x%lx",LF,"RtlpInitializeAssemblyStorageMap"
7C9  push   ASCII "RtlpInsertAssemblyStorageMapEntry"
7C9  push   ASCII "SXS: %s() bad parameters",LF,"SXS:  Map                    : %p",LF,"SXS:  AssemblyRosterIndex    : 0x%lx",LF,"SXS:  Map->AssemblyCount     : 0x%lx",LF,"SXS:  StorageLocation        : %p",LF,"SXS:  StorageLocation->Length: 0x%x",LF,"SXS:"...
7C9  push   ASCII "SXS: Assembly storage resolution failing probe because combined path length does not fit in an UNICODE_STRING.",LF
7C9  push   ASCII "SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.",LF
7C9  push   ASCII "SXS: Attempt to translate DOS path name ""%S"" to NT format failed",LF
7C9  push   ASCII "SXS: Unable to open assembly directory under storage root ""%S""; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Unable to open assembly directory under storage root ""%S""; Status = 0x%08lx",LF
7C9  push   ASCII "RtlpProbeAssemblyStorageRootForAssembly"
7C9  push   ASCII "SXS: %s() bad parameters",LF,"SXS:  Flags:               0x%lx",LF,"SXS:  Root:                %p",LF,"SXS:  AssemblyDirectory:   %p",LF,"SXS:  PreAllocatedString:  %p",LF,"SXS:  DynamicString:       %p",LF,"SXS:  StringUsed:          %p"...
7C9  push   ASCII "RtlpGetActivationContextDataStorageMapAndRosterHeader"
7C9  push   ASCII "SXS: %s() passed the empty activation context",LF
7C9  push   ASCII "SXS: %s() bad parameters:",LF,"SXS:    Flags                : 0x%lx",LF,"SXS:    Peb                  : %p",LF,"SXS:    ActivationContextData: %p",LF,"SXS:    AssemblyStorageMap   : %p",LF,"RtlpGetActivationContextDataStorageMapAndRoster"...
7C9  push   ASCII "SXS: Assembly directory name stored in assembly information too long (%lu bytes) - ACTIVATION_CONTEXT_DATA at %p",LF
7C9  push   ASCII "SXS: Attempt to translate DOS path name ""%S"" to NT format failed",LF
7C9  push   ASCII "SXS: Storage resolution callback said that this is a well known storage root",LF
7C9  push   ASCII "SXS: Attempt to probe known root of assembly storage (""%wZ"") failed; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Attempt to insert well known storage root into assembly storage map assembly roster index %lu failed; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Storage resolution callback has indicated that this is the last root to process: number %Iu",LF
7C9  push   ASCII "SXS: Unable to resolve storage root for assembly directory %wZ in %Iu tries",LF
7C9  push   ASCII "SXS: Callback routine cancelled storage root resolution on root number %Iu",LF
7C9  push   ASCII "SXS: Storage resolution finished because callback indicated no more entries on root number %Iu",LF
7C9  push   ASCII "SXS: Attempt to probe assembly storage root %wZ for assembly directory %wZ failed with status = 0x%08lx",LF
7C9  push   ASCII "SXS: Unable to open assembly directory under storage root ""%S""; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: It is resolved!!!, GOOD"
7C9  push   ASCII "SXS: Storage resolution failed to insert entry to storage map; Status = 0x%08lx",LF
7C9  push   ASCII "RtlpResolveAssemblyStorageMapEntry"
7C9  push   ASCII "SXS: %s() bad parameters",LF,"SXS:   Map                : %p",LF,"SXS:   Data               : %p",LF,"SXS:   AssemblyRosterIndex: 0x%lx",LF,"SXS:   Map->AssemblyCount : 0x%lx",LF
7C9  push   ASCII "RtlGetAssemblyStorageRoot"
7C9  push   ASCII "SXS: %s() passed the empty activation context",LF
7C9  push   ASCII "SXS: RtlGetAssemblyStorageRoot() unable to get activation context data, storage map and assembly roster header.  Status = 0x%08lx",LF
7C9  push   ASCII "RtlGetAssemblyStorageRoot"
7C9  push   ASCII "SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx",LF
7C9  push   ASCII "SXS: RtlGetAssemblyStorageRoot() unable to resolve storage map entry.  Status = 0x%08lx",LF
7C9  push   ASCII "RtlGetAssemblyStorageRoot"
7C9  push   ASCII "SXS: %s() bad parameters:",LF,"SXS:    Flags              : 0x%lx",LF,"SXS:    AssemblyRosterIndex: 0x%lx",LF,"SXS:    AssemblyStorageRoot: %p",LF,"SXS:    Callback           : %p",LF
7C9  push   ASCII "This != NULL"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "(This->PrivateDynamicallyAllocatedString == NULL) || (This->PrivateDynamicallyAllocatedString->Buffer == NULL)"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "rUS.Length <= This->PrivatePreallocatedString->MaximumLength"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "This->PrivateUsedString != NULL"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "This->PrivateUsedString != NULL"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "sxsisol_SearchActCtxForDllName"
7C9  push   ASCII "[%x.%x] SXS: %s - Relative redirection plus env var expansion.",LF
7C9  push   ASCII "!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "Status != STATUS_NOT_FOUND"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   ASCII "Status != STATUS_SXS_SECTION_NOT_FOUND"
7C9  push   ASCII "d:\xpsprtm\base\ntdll\sxsisol.cpp"
7C9  push   ASCII "Internal error check failed"
7C9  push   UNICODE ".mui"
7C9  push   UNICODE "mui\"
7C9  push   UNICODE "C:\WINDOWS"
7C9  push   UNICODE "\mui\fallback\"
7C9  push   UNICODE ".mui"
7C9  push   UNICODE ".mui"
7C9  push   ASCII "LdrRelocateImageWithBias"
7C9  push   ASCII "%s: %s() failed 0x%lx",LF,"%s: OldBase     : %p",LF,"%s: NewBase     : %p",LF,"%s: Diff        : 0x%I64x",LF,"%s: NextOffset  : %p",LF,"%s: *NextOffset : 0x%x",LF,"%s: SizeOfBlock : 0x%lx",LF
7C9  push   UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "#%u"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Index not found into the bitmap %08lx",LF
7C9  push   ASCII "Invalid Cache depth",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Ignoring RtlDestroyHeap( NULL )",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap missing last entry in committed range near %x",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "No free blocks in the cache but the depth is not 0 %ld",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "RTL: Expand variables for %wZ failed - Status == %lx Size %x > %x <%x>",LF
7C9  push   ASCII "RTL: Expand variables for %wZ failed - Status == %lx",LF
7C9  push   ASCII "RtlpCallQueryRegistryRoutine: skipping expansion.  Status=%x RequiredLength=%x",LF
7C9  push   ASCII "RtlpCallQueryRegistryRoutine: skipping environment expansion.  ValueLength=%x",LF
7C9  push   ASCII "RtlQueryRegistryValues: Miscomputed buffer size at line %d",LF
7C9  push   ASCII "RtlQueryRegistryValues: Miscomputed buffer size at line %d",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid heap signature for heap at %x"
7C9  push   ASCII ", passed to %s"
7C9  push   UNICODE "GlobalTags"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Unable to release memory at %p for %p bytes - Status == %x",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "HEAP: Free Heap block %lx modified at %lx after it was freed",LF
7C9  push   UNICODE "csrss"
7C9  push   UNICODE "CSRSS"
7C9  push   UNICODE "\WindowsSS"
7C9  push   UNICODE "%%%u!%s!"
7C9  push   UNICODE "hc"
7C9  push   ASCII "RTL: RtlNtStatusToDosError(0x%lx): No Valid Win32 Error Mapping",LF
7C9  push   ASCII "RTL: Edit ntos\rtl\generr.c to correct the problem",LF
7C9  push   ASCII "RTL: ERROR_MR_MID_NOT_FOUND is being returned",LF
7C9  push   UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ProductOptions"
7C9  push   UNICODE "ProductType"
7C9  push   UNICODE "WinNt"
7C9  push   UNICODE "LanmanNt"
7C9  push   UNICODE "ServerNt"
7C9  push   UNICODE ":%u"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Inspecting leaks at process shutdown ...",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "%ld leaks detected.",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "No leaks detected.",LF
7C9  push   ASCII "HEAP: Invalid size %ld for the affinity mask. Using %ld instead",LF
7C9  push   ASCII "NtQuerySystemInformation failed",LF
7C9  push   ASCII "Set 0x%X protection for %p section for %d bytes, old protection 0x%X",LF
7C9  push   ASCII "CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X",LF
7C9  push   ASCII "LdrReadMemory"
7C9  push   ASCII "LdrReadMemory"
7C9  push   ASCII "LDR: %s - exception %08lx caught while copying %u bytes from %p to %p",LF
7C9  push   ASCII "free build; no checkpoint info available"
7C9  push   ASCII "LDR: LdrpInitializeProcess() threw an exception: %08lx",LF,"     Exception record: %p",LF,"     Context record: %p",LF,"     Last checkpoint: %s line %d",LF
7C9  push   UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "PageHeapFlags"
7C9  push   UNICODE "PageHeapSizeRangeStart"
7C9  push   UNICODE "PageHeapSizeRangeEnd"
7C9  push   UNICODE "PageHeapRandomProbability"
7C9  push   UNICODE "PageHeapFaultProbability"
7C9  push   UNICODE "PageHeapFaultTimeOut"
7C9  push   UNICODE "PageHeapDllRangeStart"
7C9  push   UNICODE "PageHeapDllRangeEnd"
7C9  push   UNICODE "PageHeapTargetDlls"
7C9  push   ASCII "LdrpTouchThreadStack"
7C9  push   ASCII "LDR: Unable to unprotect IAT to enable tagging by DLL.",LF
7C9  push   ASCII "ntdll: wants more than ULONG_MAX bytes ",LF
7C9  mov    UNICODE ".DLL"
7C9  mov    UNICODE ".Local"
7C9  push   ASCII "Resource @ %lx",LF
7C9  push   ASCII " NumberOfWaitingShared = %lx",LF
7C9  push   ASCII " NumberOfWaitingExclusive = %lx",LF
7C9  push   ASCII " NumberOfActive = %lx",LF
7C9  push   ASCII "NTDLL: Calling thread (%X) not owner of CritSect: %p  Owner ThreadId: %X",LF
7C9  push   UNICODE "Objects>%4u"
7C9  push   UNICODE "Objects=%4u"
7C9  push   UNICODE "VirtualAlloc"
7C9  push   ASCII "NTDLL: Lost critical section %08lX",LF
7C9  push   UNICODE "verifier.dll"
7C9  push   UNICODE "verifier.dll"
7C9  push   ASCII "AVRF: provider %ws was not found in the initialization list ",LF
7C9  push   ASCII "AVRF: provider %ws ",LF
7C9  push   ASCII "AVRF: chain: searching in %ws",LF
7C9  push   ASCII "AVRF: chain: dll: %ws",LF
7C9  push   ASCII "AVRF: chain: thunk: %s == %s ?",LF
7C9  push   ASCII "AVRF: Found duplicate for (%ws: %s) in %ws",LF
7C9  push   ASCII "AVRF: Checking %ws for duplicate (%ws: %s) ",LF
7C9  push   ASCII "AVRF: Chaining (%ws: %s) to %ws",LF
7C9  push   ASCII "AVrfDllUnloadNotification called for a provider (%p) ",LF
7C9  push   ASCII "AVRF: Unable to unprotect IAT to modify thunks (status %08X).",LF
7C9  push   ASCII "AVRF:SilviuC: New thunk for %s is null. ",LF
7C9  push   ASCII "AVRF: Snapped (%ws: %s) with (%ws: %p). ",LF
7C9  push   ASCII "AVRF: found verified export %s @ %p ",LF
7C9  push   ASCII "AVRF: failed to enable handle checking (status %X) ",LF
7C9  push   ASCII LF,LF,"===========================================================",LF
7C9  push   ASCII "VERIFIER INTERNAL ERROR %p: pid 0x%X: %s ",LF,LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF
7C9  push   ASCII "===========================================================",LF,LF
7C9  push   ASCII LF,LF,"===========================================================",LF
7C9  push   ASCII "VERIFIER INTERNAL WARNING %p: pid 0x%X: %s ",LF,LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF
7C9  push   ASCII "===========================================================",LF,LF
7C9  push   ASCII LF,LF,"===========================================================",LF
7C9  push   ASCII "VERIFIER STOP %p: pid 0x%X: %s ",LF,LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF,TAB,"%p : %s",LF
7C9  push   ASCII "===========================================================",LF,LF
7C9  push   ASCII "Page heap: found %s @ address %p ",LF
7C9  push   ASCII "Page heap: detected CRT heap @ %p ",LF
7C9  push   ASCII "AVRF: verifier dll `%ws' ",LF
7C9  push   UNICODE "C:\WINDOWS"
7C9  push   UNICODE "\System32\"
7C9  push   ASCII "AVRF: %ws: failed to load provider `%ws' (status %08X) from %ws",LF
7C9  push   ASCII "AVRF: provider %ws is not a DLL image ",LF
7C9  push   ASCII "AVRF: cannot find an entry point for provider %ws ",LF
7C9  push   ASCII "AVRF: provider %ws passed an invalid descriptor @ %p ",LF
7C9  push   ASCII "AVRF: initialized provider %ws (descriptor @ %p) ",LF
7C9  push   ASCII "AVRF: provider %ws did not initialize correctly ",LF
7C9  push   ASCII "AVRF: exception raised in provider %ws initialization routine ",LF
7C9  push   ASCII "AVRF: exception raised while probing provider %ws ",LF
7C9  push   ASCII "AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports ",LF
7C9  push   ASCII "LDR: Unable to unprotect IAT to enable per DLL page heap.",LF
7C9  push   ASCII "Snapped (%ws) HeapCreate ... ",LF
7C9  push   ASCII "Snapped (%ws) RtlAllocateHeap ... ",LF
7C9  push   ASCII "Snapped (%ws) RtlReAllocateHeap ... ",LF
7C9  push   ASCII "Snapped (%ws) RtlFreeHeap ... ",LF
7C9  push   ASCII "Snapped (%ws) HeapAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) HeapReAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) HeapFree ... ",LF
7C9  push   ASCII "Snapped (%ws) LocalAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) LocalReAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) LocalFree ... ",LF
7C9  push   ASCII "Snapped (%ws) GlobalAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) GlobalReAlloc ... ",LF
7C9  push   ASCII "Snapped (%ws) GlobalFree ... ",LF
7C9  push   ASCII "Snapped (%ws) malloc ... ",LF
7C9  push   ASCII "Snapped (%ws) realloc ... ",LF
7C9  push   ASCII "Snapped (%ws) calloc ... ",LF
7C9  push   ASCII "Snapped (%ws) free ... ",LF
7C9  push   ASCII "Snapped (%ws) operator new ... ",LF
7C9  push   ASCII "Snapped (%ws) operator delete ... ",LF
7C9  push   ASCII "Snapped (%ws) operator new[] ... ",LF
7C9  push   ASCII "Snapped (%ws) operator delete[] ... ",LF
7C9  push   UNICODE "msvcrt.dll"
7C9  push   UNICODE "msvcrt.dll"
7C9  push   ASCII "AVRF: resnapping %ws ... ",LF
7C9  push   ASCII "AVRF: skipped resnapping provider %ws ... ",LF
7C9  push   ASCII "AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled",LF
7C9  push   ASCII "AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.",LF
7C9  push   ASCII "AVRF: -*- final list of providers -*- ",LF
7C9  push   UNICODE "VerifierFlags"
7C9  push   UNICODE "VerifierDebug"
7C9  push   UNICODE "VerifierDlls"
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() passed string section at %p only %lu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with wrong magic value",LF,"   Expected %lu; got %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() passed string section at %p with too small of a header",LF,"   HeaderSize: %lu",LF,"   Required: %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with element list overlapping section header",LF,"   Section header: %p",LF,"   Header Size: %lu",LF,"   ElementListOffset: %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with search structure overlapping section header",LF,"   Section header: %p",LF,"   Header Size: %lu",LF,"   SearchStructureOffset: %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with user data overlapping section header",LF,"   Section header: %p",LF,"   Header Size: %lu",LF,"   User Data Offset: %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with user data too small",LF,"   Section header: %p",LF,"   UserDataSize: %lu; needed: %lu",LF
7C9  push   ASCII "RtlpCrackActivationContextStringSectionHeader"
7C9  push   ASCII "SXS: %s() found assembly information section with user data extending beyond section data",LF,"   Section header: %p",LF,"   UserDataSize: %lu",LF,"   UserDataOffset: %lu",LF,"   Section size: %lu",LF
7C9  push   ASCII "RtlpQueryAssemblyInformationActivationContextDetailedInformation"
7C9  push   ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context",LF
7C9  push   ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
7C9  push   ASCII "SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context",LF
7C9  push   ASCII "RtlpQueryFilesInAssemblyInformationActivationContextDetailedInformation"
7C9  push   ASCII "SXS: %s() received invalid file index (%d) in Assembly (%d)",LF
7C9  push   ASCII "SXS: Unable to open storage root subkey %wZ; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Unabel to query location from storage root subkey %wZ; Status = 0x%08lx",LF
7C9  push   ASCII "SXS: Assembly storage root location value type is not REG_SZ",LF
7C9  push   ASCII "SXS: Assembly storage root location value has non-even size",LF
7C9  push   ASCII "SXS: Assembly storage root location for %wZ does not fit in a UNICODE STRING",LF
7C9  push   UNICODE "Microsoft Base Cryptographic Provider v1.0"
7C9  push   UNICODE "ole32.dll"
7C9  push   ASCII "StgConvertVariantToProperty"
7C9  push   ASCII "StgConvertPropertyToVariant"
7C9  push   ASCII "StgPropertyLengthAsVariant"
7C9  push   UNICODE "VS_VERSION_INFO"
7C9  push   ASCII "LDR: Warning: invalid version resource",LF
7C9  push   ASCII "LDR: Exception encountered processing bogus version resource",LF
7C9  push   UNICODE "Software\Microsoft\Windows\CurrentVersion"
7C9  push   UNICODE "MUILanguages"
7C9  push   UNICODE "FileVersions"
7C9  push   UNICODE "ChecksumDisable"
7C9  push   UNICODE "MUIVer"
7C9  push   UNICODE "MUIVer"
7C9  imul   UNICODE "Find ASCII"
7C9  push   UNICODE "VS_VERSION_INFO"
7C9  push   UNICODE "VarFileInfo"
7C9  push   UNICODE "ResourceChecksum"
7C9  push   ASCII "LDR: Warning: invalid version resource",LF
7C9  push   ASCII "LDR: Exception encountered processing bogus version resource",LF
7C9  push   UNICODE "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages\RCV2"
7C9  push   ASCII "Heap corruption detected at %p",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap block at %p modified at %p past requested size of %lx",LF
7C9  mov    ASCII ", "
7C9  mov    ASCII "Function: "
7C9  push   ASCII LF,"*** Assertion failed: %s%s",LF,"***   %s%s%sSource File: %s, line %ld",LF,LF
7C9  push   ASCII "Break repeatedly, break Once, Ignore, terminate Process, or terminate Thread (boipt)? "
7C9  push   ASCII "Execute '.cxr %p' to dump context",LF
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "TimeZoneInformation"
7C9  mov    UNICODE "Bias"
7C9  mov    UNICODE "StandardName"
7C9  mov    UNICODE "StandardBias"
7C9  mov    UNICODE "StandardStart"
7C9  mov    UNICODE "DaylightName"
7C9  mov    UNICODE "DaylightBias"
7C9  mov    UNICODE "DaylightStart"
7C9  push   UNICODE "Bias"
7C9  push   UNICODE "StandardName"
7C9  push   UNICODE "StandardBias"
7C9  push   UNICODE "StandardStart"
7C9  push   UNICODE "DaylightName"
7C9  push   UNICODE "DaylightBias"
7C9  push   UNICODE "DaylightStart"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "VirtualQuery Failed 0x%08x %x",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "VirtualProtect Failed 0x%08x %x",LF
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   UNICODE "Objects>%4u"
7C9  push   UNICODE "Objects=%4u"
7C9  push   UNICODE "VirtualAlloc"
7C9  push   ASCII "RtlValidateHeap"
7C9  push   ASCII "RtlValidateHeap"
7C9  push   UNICODE "\SystemRoot"
7C9  push   UNICODE "\bootstat.dat"
7C9  push   UNICODE "System Volume Information"
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    ASCII "ffff:"
7C9  push   ASCII "::%hs%u.%u.%u.%u"
7C9  push   ASCII "::ffff:0:%u.%u.%u.%u"
7C9  push   ASCII "::"
7C9  push   ASCII "%x"
7C9  push   ASCII ":%u.%u.%u.%u"
7C9  push   ASCII "%%%u"
7C9  push   ASCII "]:%u"
7C9  push   ASCII "%u.%u.%u.%u"
7C9  push   ASCII ":%u"
7C9  mov    ASCII "ffff:"
7C9  push   UNICODE "::%hs%u.%u.%u.%u"
7C9  push   UNICODE "::ffff:0:%u.%u.%u.%u"
7C9  push   UNICODE "::"
7C9  push   UNICODE "%x"
7C9  push   UNICODE ":%u.%u.%u.%u"
7C9  push   UNICODE "%%%u"
7C9  push   UNICODE "]:%u"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "Trace database: failed to release segment %p ",LF
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "Trace database: failing attempt to save biiiiig trace (size %u) ",LF
7C9  push   UNICODE "C:\WINDOWS"
7C9  push   UNICODE "\system32\kernel32.dll"
7C9  push   ASCII LF,LF," *** Unhandled exception 0x%08lx, hit in %ws:%s",LF,LF
7C9  push   ASCII LF,LF," *** A stack buffer overrun occurred in %ws:%s",LF,LF
7C9  push   ASCII "This is usually the result of a memory copy to a local buffer or structure where the size is not properly calculated/checked.",LF
7C9  push   ASCII "If this bug ends up in the shipping product, it could be a severe security hole.",LF
7C9  push   ASCII "The stack trace should show the guilty function (the function directly above __report_gsfailure).",LF
7C9  push   ASCII LF,LF," *** Resource timeout (%p) in %ws:%s",LF,LF
7C9  push   ASCII "The resource is owned exclusively by thread %x",LF
7C9  push   ASCII "The resource is owned shared by %d threads",LF
7C9  push   ASCII "The resource is unowned.  This usually implies a slow-moving machine due to memory pressure",LF,LF
7C9  push   ASCII LF,LF," *** Critical Section Timeout (%p) in %ws:%s",LF,LF
7C9  push   ASCII "The critical section is owned by thread %x.",LF
7C9  push   ASCII "Go determine why that thread has not released the critical section.",LF,LF
7C9  push   ASCII "The critical section is unowned.  This usually implies a slow-moving machine due to memory pressure",LF,LF
7C9  push   ASCII LF,LF," *** Inpage error in %ws:%s",LF,LF
7C9  push   ASCII "The instruction at %p referenced memory at %p.",LF
7C9  push   ASCII "This failed because of error %x.",LF,LF
7C9  push   ASCII "This means that the I/O device reported an I/O error.  Check your hardware."
7C9  push   ASCII "This means the data could not be read, typically because of a bad block on the disk.  Check your hardware.",LF,LF
7C9  push   ASCII "This means the machine is out of memory.  Use !vm to see where all the memory is being used.",LF,LF
7C9  push   ASCII LF,LF," *** An Access Violation occurred in %ws:%s",LF,LF
7C9  mov    ASCII "write to"
7C9  mov    ASCII "read from"
7C9  push   ASCII "The instruction at %p tried to %s "
7C9  push   ASCII "an invalid address, %p",LF,LF
7C9  push   ASCII "a NULL pointer",LF,LF
7C9  push   ASCII " *** enter .exr %p for the exception record",LF
7C9  push   ASCII " ***  enter .cxr %p for the context",LF
7C9  push   ASCII " *** then kb to get the faulting stack",LF,LF
7C9  push   ASCII " *** Restarting wait on critsec or resource at %p (in %ws:%s)",LF,LF
7C9  push   ASCII ".hotp1  "
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    ASCII "(no change)"
7C9  push   ASCII TAB,"%08I64X: VA64 %016I64X -> %016I64X %s",LF
7C9  mov    ASCII "(no change)"
7C9  push   ASCII TAB,"%08I64X: PC32 %08X -> %08X (target %08X) %s",LF
7C9  mov    ASCII "(no change)"
7C9  push   ASCII 09,"%08I64X: "
7C9  mov    ASCII " (padding)"
7C9  push   ASCII 09,"         "
7C9  push   ASCII 09,"%08I64X: "
7C9  push   ASCII "Invalid fixup information",LF
7C9  push   ASCII "Validation failure. Source = %lx, Target = %lx, Size = %lx",LF
7C9  push   ASCII "Invalid target validation range",LF
7C9  push   ASCII "Invalid source hotpatch validation range",LF
7C9  push   ASCII "Skipping hook-specific validation range during global validation",LF
7C9  push   ASCII "Validation failed for global range %u of %u",LF
7C9  push   ASCII "Invalid hotpatch validation array pointer",LF
7C9  push   ASCII "Invalid hotpatch validation pointer in hook record",LF
7C9  push   ASCII "Hook type not yet implemented",LF
7C9  push   ASCII "Invalid hotpatch hook pointer",LF
7C9  push   ASCII "Invalid hook type specified",LF
7C9  push   ASCII "Invalid hotpatch relative address",LF
7C9  push   ASCII 09,"%08I64X: "
7C9  push   ASCII " %02X"
7C9  push   ASCII " }",LF
7C9  push   ASCII "Invalid hotpatch relative address",LF
7C9  push   ASCII "No hooks defined in hotpatch",LF
7C9  push   ASCII "Inserting %u hooks into target image",LF
7C9  push   ASCII "Invalid hotpatch hook array pointer",LF
7C9  push   ASCII "Failed to normalize PE header for validation",LF
7C9  push   ASCII "Header too large (%u>%u) for copy/normalize/validate",LF
7C9  imul   UNICODE "onnect"
7C9  push   ASCII "PE header hash ID comparsion failure (PE2)",LF
7C9  push   ASCII "Unrecognized"
7C9  push   ASCII "HOTP_ID_PeDebugSignature"
7C9  push   ASCII "HOTP_ID_PeHeaderHash2"
7C9  push   ASCII "HOTP_ID_PeHeaderHash1"
7C9  push   ASCII "HOTP_ID_None",LF
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "heap handle with incorrect signature"
7C9  mov    ASCII "PAGE_WRITECOPY"
7C9  mov    ASCII "PAGE_READWRITE"
7C9  mov    ASCII "PAGE_READONLY"
7C9  mov    ASCII "PAGE_NOACCESS"
7C9  mov    ASCII "UNKNOWN"
7C9  mov    ASCII "PAGE_EXECUTE"
7C9  push   ASCII "0x%08X"
7C9  mov    ASCII "PAGE_GUARD"
7C9  mov    ASCII "PAGE_EXECUTE_WRITECOPY"
7C9  mov    ASCII "PAGE_EXECUTE_READWRITE"
7C9  mov    ASCII "PAGE_EXECUTE_READ"
7C9  push   ASCII "Page heap: Failed changing VM at %08X size 0x%X",LF,"          from %s to %s (Status %08X)",LF
7C9  imul   ASCII CR,LF,"element [id=atom(checkbutton)][selected]",CR,LF,"{",CR,LF,"background: dtb(handlemap(4), 3, 5);",CR,LF,"}",CR,LF,"element [id=atom(checkbutton)][mousefocused]",CR,LF,"{",CR,LF,"background: dtb(handlemap(4), 3, 2);",CR,LF,"}",CR,LF,"e"...
7C9  push   ASCII "page heap failed to commit memory"
7C9  push   ASCII "page heap failed to decommit memory"
7C9  push   ASCII "page heap failed to commit memory"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "Exception record (.exr on 1st word, .cxr on 2nd word)"
7C9  push   ASCII "Exception code"
7C9  push   ASCII "Heap handle involved"
7C9  push   ASCII "unexpected exception raised in heap code path"
7C9  push   ASCII "Page heap count"
7C9  push   ASCII "Actual count"
7C9  push   ASCII "process heap list count is wrong"
7C9  push   ASCII "Page heap: pid 0x%X: vm limit: vspace: disabling full page heap ",LF
7C9  push   ASCII "Page heap: pid 0x%X: vm limit: pfile: disabling full page heap ",LF
7C9  push   ASCII "Page heap: pid 0x%X: vm limit: reenabling full page heap ",LF
7C9  push   ASCII "Block @ %p has been leaked ",LF
7C9  push   ASCII "Page heap: Last stack @ %p, Current stack @ %p ",LF
7C9  push   ASCII "Page heap: enabling fault injection for process 0x%X ",LF
7C9  push   ASCII "/no_sync option used"
7C9  push   ASCII "Current thread using the heap"
7C9  push   ASCII "First thread that used the heap"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "multithreaded access in HEAP_NO_SERIALIZE heap"
7C9  push   ASCII "Current thread trying to acquire the heap lock"
7C9  push   ASCII "Thread owning heap lock"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "multithreaded access in HEAP_NO_SERIALIZE heap"
7C9  push   ASCII "Page heap: assert: (SystemInfo.PageSize == PAGE_SIZE)",LF
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "Page heap: assert: (SystemInfo.AllocationGranularity == VM_UNIT_SIZE)",LF
7C9  push   ASCII "Page heap: Insufficient memory to create heap",LF
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "exception raised while verifying block header"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "block already freed"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted infix pattern for freed block"
7C9  push   ASCII "Heap owning the block"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap used in the call"
7C9  push   ASCII "corrupted heap pointer or using wrong heap"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted suffix pattern"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted prefix pattern"
7C9  push   ASCII "Corrupted stamp"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted start stamp"
7C9  push   ASCII "Corrupted stamp"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted end stamp"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "exception raised while verifying block"
7C9  push   ASCII "Block size"
7C9  push   ASCII "Heap block"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "corrupted heap block"
7C9  push   ASCII "Size requested"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "extreme size request"
7C9  push   ASCII "Size requested"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "extreme size request"
7C9  push   ASCII "Page heap: Invalid allocation size",LF
7C9  push   ASCII "Page heap: Unable to allocate virtual memory",LF
7C9  push   ASCII "Process heap handle"
7C9  push   ASCII "attempt to destroy process heap"
7C9  push   ASCII "unable to release virtual memory"
7C9  push   ASCII "Size requested"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "extreme size request"
7C9  push   ASCII "Size requested"
7C9  push   ASCII "Heap handle"
7C9  push   ASCII "extreme size request"
7C9  push   ASCII "Page heap: Invalid allocation size",LF
7C9  push   ASCII "Page heap: assert: (OriginalAllocationInPageHeap)",LF
7C9  push   ASCII "Error",LF
7C9  push   ASCII "Error allocate",LF
7C9  push   ASCII "Conflicting descriptors %08lx",LF
7C9  push   ASCII "Unable to allocate page descriptor",LF
7C9  push   ASCII "HEAP %p (Seg %p) At %p Error: %s",LF
7C9  push   ASCII "%p address isn't from the heap",LF
7C9  push   ASCII "%p address isn't from the heap",LF
7C9  push   ASCII "Error finding block from lookaside %p",LF
7C9  push   ASCII "Error, block %p from lookaside not found in allocated block list",LF
7C9  push   ASCII "Entry     User      Heap          Size  PrevSize  Flags",LF
7C9  mov    ASCII "------------------------------------------------------------",LF
7C9  push   ASCII "busy "
7C9  push   ASCII "free "
7C9  push   ASCII "extra "
7C9  push   ASCII "fill "
7C9  push   ASCII "virtual "
7C9  push   ASCII "last "
7C9  push   ASCII "user_flag "
7C9  push   ASCII "%p  %p  %p  %8lx  %8lx  "
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap %x - headers modified (%x is %x instead of %x)",LF
7C9  push   ASCII "    This is located in the %s field of the heap header.",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap block at %p is not last block in segment (%x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap entry %p is beyond uncommited range [%x .. %x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap entry %p has incorrect PreviousSize field (%04x instead of %04x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Free Heap block %p modified at %p after it was freed",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap block at %p has incorrect segment index (%x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap block at %p does not match address of next uncommitted address (%x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid ReserveSize parameter - %p",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid CommitSize parameter - %p",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "May not specify Lock parameter with HEAP_NO_SERIALIZE",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Specified HeapBase (%p) invalid,  Status = %lx",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Specified HeapBase (%p) != to BaseAddress (%p)",LF
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Specified HeapBase (%p) is free or not writable",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid Address specified to %s( %p, %p )",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "dedicated (%04x) free list empty but marked as non-empty",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "dedicated (%04x) free list non-empty but marked as empty",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "dedicated (%04x) free list element %p is marked busy",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Dedicated (%04x) free list element %p is wrong size (%04x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Non-Dedicated free list element %p with too small size (%04x)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Non-Dedicated free list element %p is out of order",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Number of free blocks in arena (%ld) does not match number in the free lists (%ld)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Total size of free blocks in arena (%ld) does not match number total in heap header (%ld)",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Pseudo Tag %04x size incorrect (%x != %x) %x",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Tag %04x (%ws) size incorrect (%x != %x) %x",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "May not destroy the process heap at %x",LF
7C9  push   ASCII "RtlDestroyHeap"
7C9  push   ASCII "RtlAllocateHeap"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Just allocated block at %p for 0x%x bytes",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Just allocated block at %p for 0x%x bytes with tag %ws",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid allocation size - %p (exceeded %x)",LF
7C9  push   ASCII "RtlReAllocateHeap"
7C9  push   ASCII "RtlReAllocateHeap"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "About to reallocate block at %p to 0x%x bytes",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "About to rellocate block at %p to 0x%x bytes with tag %ws",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Just reallocated block at %p to 0x%x bytes",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Just reallocated block at %p to 0x%x bytes with tag %ws",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "Invalid allocation size - %p (exceeded %x)",LF
7C9  push   ASCII "RtlFreeHeap"
7C9  push   ASCII "RtlFreeHeap"
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "About to free block at %p",LF
7C9  push   ASCII "HEAP[%wZ]: "
7C9  push   ASCII "About to free block at %p with tag %ws",LF
7C9  push   ASCII "RtlGetUserInfoHeap"
7C9  push   ASCII "RtlGetUserInfoHeap"
7C9  push   ASCII "RtlSetUserValueHeap"
7C9  push   ASCII "RtlSetUserValueHeap"
7C9  push   ASCII "RtlSetUserFlagsHeap"
7C9  push   ASCII "RtlSetUserFlagsHeap"
7C9  push   ASCII "RtlSizeHeap"
7C9  push   ASCII "RtlSizeHeap"
7C9  push   ASCII "RtlCompactHeap"
7C9  push   ASCII "RtlZeroHeap"
7C9  push   ASCII "RtlCreateTagHeap"
7C9  push   ASCII "RtlQueryTagHeap"
7C9  push   ASCII "RtlUsageHeap"
7C9  push   ASCII "RtlWalkHeap"
7C9  mov    ASCII "exp"
7C9  mov    ASCII "exp"
7C9  mov    ASCII "log10"
7C9  mov    ASCII "log10"
7C9  mov    ASCII "log"
7C9  mov    ASCII "log"
7C9  mov    ASCII "pow"
7C9  mov    ASCII "pow"
7C9  mov    ASCII "pow"
7C9  mov    ASCII "log10"
7C9  mov    ASCII "log"
7C9  mov    ASCII "log2"
7C9  mov    ASCII "log2"
7C9  mov    ASCII "exp10"
7C9  mov    ASCII "exp2"
7C9  mov    ASCII "exp"
7C9  mov    ASCII "modf"
7C9  mov    ASCII "pow"
7C9  mov    ASCII "floor"
7C9  mov    ASCII "ceil"
7C9  mov    ASCII "atan"
7C9  push   UNICODE "%s_%d"
7C9  push   ASCII "\\.\WMIDataDevice"
7C9  push   UNICODE "Restricted"
7C9  push   UNICODE "%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X"
7C9  push   UNICODE "\WmiGuid\"
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  cmp    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  mov    UNICODE "ALLUSERSPROFILE=C:\Documents and Settings\All Users"
7C9  push   ASCII "\\.\WMIDataDevice"
7C9  push   UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\NetworkCards"
7C9  push   UNICODE "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\NetworkCards"
7C9  push   UNICODE "%ws\%ws"
7C9  push   UNICODE "Description"
7C9  imul   UNICODE "Find ASCII"
7C9  push   UNICODE "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName"
7C9  push   UNICODE "ComputerName"
7C9  push   UNICODE "\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor"
7C9  push   UNICODE "%ws\%u"
7C9  push   UNICODE "~MHz"
7C9  push   UNICODE "\Device\Harddisk%d\Partition0"
7C9  push   UNICODE "\Registry\Machine\Hardware\DeviceMap\Scsi\Scsi Port %d\Scsi Bus %d\Target ID %d\Logical Unit Id %d"
7C9  push   UNICODE "Identifier"
7C9  push   UNICODE "Identifier"
7C9  push   UNICODE "\Device\MountPointManager"
7C9  push   UNICODE "\device\harddisk"

以前的，ASCII "action= ?????"，这样的地方是验证服务器的地址．
可是这个软件没有这样的地方，不知道那个才是地址，希望谁帮我一下．
我想修改成本地验证！

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课