The strings are in the message table of NTDll.dll.mui. They are a decimal representation of &hffffffffnnnnnnnn where the n is the 32 bit NTStatus code. So I need to convert 64 bit integers or 64 bit hexedecimal string to a signed decimal representation so I can search for them.

This approach is needed because of the problem here http://www.vbforums.com/showthread.p...20#post4194720 which involve letting windows do the work - but it errors.