a fork from NtTrace - http://www.howzatt.demon.co.uk/NtTrace/