000257 0a88 mydll.dll :4ad0576d->kernel32.dll:7c81b1f0
SetConsoleMode (IN HANDLE hConsoleHandle=7h, IN DWORD
dwMode=3h)
000258 0a88 mydll.dll :4ad0576d<-kernel32.dll:7c81b1f0
SetConsoleMode ->BOOL=1h ()
000257 - Indicates the log entry number. Each log entry will
have a unique number. The "---- Potential Errors Detected ---" will
refer back to individual log entries using its log entry
number. 0a88
- Indicates the currently executing thread ID. If the application
has only one thread, this number will never change. Since log
entries are recorded in order of execution, if two or more threads
are recording data to the log file then you may need to use the
thread ID to follow thread-specific sequential actions. mydll.dll - Indicates the DLL which is making the API
call 4ad0576d- Indicates the return address for the API
call made by mydll.dll. Typically this will tell you the address in
the code where the call is originating.
-> Indicates the call is being entered. For call entry
log element, all of the input parameters are displayed (in and
in/out parameters) <- Indicates the call is returning to the original
caller. For call exit log entries, all of the output parameters are
displayed (out and in/out parameters).
kernel32.dll - Indicates the DLL where the API call is
landing. 7c81b1f0 - Indicates the address of the API inside of
kernel32 where the call is landing. If you disassemble kernel32.dll
at address 7c81b1f0, you will find the code for the function
SetConsoleMode
->BOOL=1h Indicates the API returned the value "1" and
the return code has type "BOOL".
Application Startup Information
000001 0a88 Logging started for
Module=C:\test\cmd_test\bin\cmd.exe
Using archive=
PID=0xec
CommandLine = cmd
000002 0a88 Logging options: CAP_LEVEL=9 MAX_CAP_ARY=25
MAX_CAP_STR=150 MAX_NEST=100 VERSION=3.090
000003 0a88 System Current Directory = C:\test\cmd_test\bin
Virtual Current Directory = C:\test\cmd_test\bin
List
of DLLs loaded into memory during runtime
The section labeled "--- Modules loaded ---" is located near the
end of the log and will describe all of the DLLs which were loaded
into memory at runtime and the addresses they were loaded to. This
list also describes whether DLLs were loaded by Windows or by
Thinstall.
SYSTEM_LOADED- Indicates the DLL was loaded by
Windows, the file must exist on the disk. MEMORY_MAPPED_ANON - Indicates the DLL was loaded by
Thinstall, the file may be loaded from the virtual file system. 46800000-46873fff- Indicates the address ranges in
virtual memory where the DLL was loaded.
---- Timing Report: list of slowest 150 objects profiled ---
8255572220 total cycles (2955.56 ms): |sprof|
thinstall_LoadLibrary2
765380728 cycles (274.01 ms) on log entry 21753
428701805 cycles (153.48 ms) on log entry 191955
410404281 cycles (146.93 ms) on log entry 193969
231503734 cycles (82.88 ms) on log entry 188438
227419794 cycles (81.42 ms) on log entry 190209
211952538 cycles (75.88 ms) on log entry 197416
202095103 cycles (72.35 ms) on log entry 189394
200356604 cycles (71.73 ms) on log entry 194646
192420627 cycles (68.89 ms) on log entry 190812
183214731 cycles (65.59 ms) on log entry 195836
... 438 total calls
7847975891 total cycles (2809.64 ms): |sprof|
ts_load_internal_module
764794646 cycles (273.80 ms) on log entry 21753
426837866 cycles (152.81 ms) on log entry 191955
408570540 cycles (146.27 ms) on log entry 193969
228790905 cycles (81.91 ms) on log entry 188438
224240114 cycles (80.28 ms) on log entry 190209
209789307 cycles (75.11 ms) on log entry 197416
200287437 cycles (71.70 ms) on log entry 189394
198429210 cycles (71.04 ms) on log entry 194646
190612618 cycles (68.24 ms) on log entry 190812
180322247 cycles (64.56 ms) on log entry 195836
... 94 total calls
4451728477 total cycles (1593.76 ms): |sprof| ts_lookup_imports
544327945 cycles (194.87 ms) on log entry 21758
385149968 cycles (137.89 ms) on log entry 193970
187246661 cycles (67.04 ms) on log entry 190210
173617241 cycles (62.16 ms) on log entry 194647
173481875 cycles (62.11 ms) on log entry 19065
148587579 cycles (53.20 ms) on log entry 195837
133165053 cycles (47.67 ms) on log entry 189395
126806624 cycles (45.40 ms) on log entry 197417
125894370 cycles (45.07 ms) on log entry 200296
121213253 cycles (43.40 ms) on log entry 200657
... 34 total calls
1099873523 total cycles (393.76 ms): |sprof| new_thread_start
561664565 cycles (201.08 ms) on log entry 151922
531551734 cycles (190.30 ms) on log entry 152733
1619002 cycles (0.58 ms) on log entry 72875
1554448 cycles (0.56 ms) on log entry 637896
1481627 cycles (0.53 ms) on log entry 72881
1091972 cycles (0.39 ms) on log entry 580771
Potential
Errors
The potential errors is a collection of all log entries which have
"***" in their string. Thinstall marks entries that could
potentially be a problem by adding "***" to the log entry output.
See Locating Errors for more tips
on interpreting this section.
---- Potential Errors Detected ---
006425 0000075c LoadLibraryExW 'C:\Program Files\Adobe\Reader
8.0\Reader\Microsoft.Windows.Common-Controls.DLL' flags=2 -> 0
(failed ***)
006427 0000075c LoadLibraryExW 'C:\Program Files\Adobe\Reader
8.0\Reader\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL'
flags=2 -> 0 (failed ***)
006428 0000089c nview.dll :1005b94b<-kernel32.dll:7c80ae4b ***
LoadLibraryW ->HMODULE=7c800000h () *** GetLastError() returns 2
[0]: The system cannot find the file specified.
007062 0000075c LoadLibraryExW 'C:\Program Files\Adobe\Reader
8.0\Reader\en-US\Microsoft.Windows.Common-Controls.DLL' flags=2
-> 0 (failed ***)
010649 0000075c LoadLibraryExW 'C:\Program Files\Adobe\Reader
8.0\Reader\en-US\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL'
flags=2 -> 0 (failed ***)
019127 0000075c MSVCR80.dll :781348cc<-msvcrt.dll :77c10396 ***
GetEnvironmentVariableA ->DWORD=0h (OUT LPSTR lpBuffer=*0h
<bad ptr>) *** GetLastError() returns 203 [0]: The system
could not find the environment option that was entered.
019133 0000075c MSVCR80.dll :78133003<-nview.dll :1000058c ***
GetProcAddress ->FARPROC=*0h () *** GetLastError() returns 127
[203]: The specified procedure could not be found.
019435 0000075c MSVCR80.dll :78136e08<-dbghelp.dll :59a60360 ***
GetFileType ->DWORD=0h () *** GetLastError() returns 6 [0]: The
handle is invalid.
019500 0000075c MSVCR80.dll :78134481<-nview.dll :1000058c ***
GetProcAddress ->FARPROC=*0h () *** GetLastError() returns 127
[0]: The specified procedure could not be found.
019530 0000075c MSVCR80.dll :78131dcd<-dbghelp.dll :59a603a1 ***
GetModuleHandleA ->HMODULE=0h () *** GetLastError() returns 126
[0]: The specified module could not be found.