Process 10468 starting at 00007FF6B95412A0 with command line: ""C:\Program Files\Python314\python.exe" wait_iocp_win32.py 100 2"
C:\Program Files\Python314\python.exe
Loaded DLL at 00007FF9C3290000 ntdll.dll
Loaded DLL at 00007FF9C1D20000 C:\WINDOWS\System32\xtajit64se.dll
Loaded DLL at 00007FF9C1380000 C:\WINDOWS\System32\KERNEL32.DLL
NtMapViewOfSection(SectionHandle=0x8c, ProcessHandle=-1, BaseAddress=0x28e72b4b000 [0x00007ff9c1380000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b49aa8 [0x00169000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BE5D0000 C:\WINDOWS\System32\KERNELBASE.dll
NtMapViewOfSection(SectionHandle=0x7c, ProcessHandle=-1, BaseAddress=0x28e72b4b870 [0x00007ff9be5d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b4b7b8 [0x006da000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQuerySystemInformation(SystemInformationClass=0x32 [SystemRangeStartInformation], SystemInformation=0xaaa6cde3b0, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9bec10e80, Length=0x40, ReturnLength=null) => 0
NtCreateSection(SectionHandle=0xaaa6cde1c8 [0x90], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x1f, ObjectAttributes=null, SectionSize=0xaaa6cde1d8 [65536], Protect=4, Attributes=0x08000000, FileHandle=0) => 0
NtMapViewOfSection(SectionHandle=0x94, ProcessHandle=-1, BaseAddress=0xaaa6cde1d0 [0x00007ff3f8e30000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xaaa6cde210 [0x00100000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtGetNlsSectionPtr(SectionType=0xe, SectionData=0, ContextData=null, SectionPointer=0xaaa6cde388 [0x0000028e7b250000], SectionSize=null) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x4e4, ContextData=null, SectionPointer=0xaaa6cde328 [0x0000028e7b340000], SectionSize=0xaaa6cde330 [0x00011000]) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x1b5, ContextData=null, SectionPointer=0xaaa6cde328 [0x0000028e7b360000], SectionSize=0xaaa6cde330 [0x00011000]) => 0
NtCreateFile(FileHandle=0xaaa6cde378 [0x90], DesiredAccess=READ_CONTROL|SYNCHRONIZE|0x19f, ObjectAttributes=4:"\Connect", IoStatusBlock=0xaaa6cdddb0 [0/0x18], AllocationSize=null, FileAttributes=0, ShareAccess=7, CreateDisposition=2, CreateOptions=0x20, EaBuffer=0x28e72b4cf80, EaLength=0x54b) => 0
NtDeviceIoControlFile(FileHandle=0x90, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde340 [0/0], IoControlCode=0x00500023, InputBuffer=null, InputBufferLength=0, OutputBuffer=0xaaa6cde330, OutputBufferLength=8) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x31 [ProcessOwnerInformation], ProcessInformation=0xaaa6cde338, Length=8) => 0
NtDeviceIoControlFile(FileHandle=0x90, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde1e0, IoControlCode=0x00500016, InputBuffer=0xaaa6cde1f0, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc00700bb [187 'The specified system semaphore name was not found.']
NtOpenProcessToken(ProcessHandle=-1, DesiredAccess=0x8, TokenHandle=0xaaa6cde200 [0x7c]) => 0
NtQueryInformationToken(TokenHandle=0x7c, TokenInformationClass=0xc [TokenSessionId], TokenInformation=0xaaa6cddb88, Length=4, ReturnLength=0xaaa6cddb8c [4]) => 0
NtQueryInformationToken(TokenHandle=0x7c, TokenInformationClass=0x1d [TokenIsAppContainer], TokenInformation=0xaaa6cddbb0, Length=4, ReturnLength=0xaaa6cddb8c [4]) => 0
NtQueryInformationToken(TokenHandle=0x7c, TokenInformationClass=0x2a [TokenPrivateNameSpace], TokenInformation=0xaaa6cddb48, Length=4, ReturnLength=0xaaa6cddb8c [4]) => 0
NtOpenDirectoryObject(DirectoryHandle=0xaaa6cddb40 [0x9c], DesiredAccess=0xf, ObjectAttributes="\BaseNamedObjects") => 0
NtQueryInformationToken(TokenHandle=0x7c, TokenInformationClass=0x2c [TokenBnoIsolation], TokenInformation=0xaaa6cdde58, Length=0x120, ReturnLength=0xaaa6cddb8c [0x10]) => 0
NtClose(Handle=0x7c) => 0
NtCreateMutant(MutantHandle=0xaaa6cde248 [0x7c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02", InitialOwner=false) => 0
NtWaitForSingleObject(Handle=0x7c, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0xaaa6cddf98, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateSemaphore(SemaphoreHandle=0xaaa6cddf38 [0xa0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0", InitialCount=0x1cad3540, MaxCount=0x1cad3540) => 0
NtCreateSemaphore(SemaphoreHandle=0xaaa6cddf30 [0xa4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0h", InitialCount=0x147, MaxCount=0x147) => 0
NtReleaseMutant(MutantHandle=0x7c, PreviousCount=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9c14d70c0, Length=0x40, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0xaaa6cdec78 [0xb4], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\FileSystem\") => 0
NtQueryValueKey(KeyHandle=0xb4, ValueName="LongPathsEnabled", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdecb0, Length=0x14, ResultLength=0xaaa6cdec70 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xb4, ValueName="LPGO", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdecb0, Length=0x14, ResultLength=0xaaa6cdec70) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xb4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", Attributes=0xaaa6cde650 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cde698 [0xb4], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", IoStatusBlock=0xaaa6cde700 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cde6a0 [0xbc], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xb4) => 0
Loaded DLL at 00007FF9BE160000 C:\WINDOWS\SYSTEM32\apphelp.dll
NtMapViewOfSection(SectionHandle=0xbc, ProcessHandle=-1, BaseAddress=0x28e72b4b4d0 [0x00007ff9be160000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b4b3f8 [0x00106000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtOpenKey(KeyHandle=0xaaa6cddfe8 [0xc0], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xc0, ValueName="LogFlags", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cddfc0, Length=0x14, ResultLength=0xaaa6cddfb0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc0) => 0
NtOpenKey(KeyHandle=0xaaa6cddfe8, DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\OSDATA\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cde248 [0xd4], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="ShowDebugInfo", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde220, Length=0x14, ResultLength=0xaaa6cde210) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0xaaa6cde5c8 [0xc4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0xaaa6cde640 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cde5d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b52fa0, SecurityDescriptorLength=0x20, ReturnLength=0xaaa6cde5d8 [0x20]) => 0
NtClose(Handle=0xc4) => 0
NtOpenFile(FileHandle=0xaaa6cde5c8 [0xc4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\ntdll.dll", IoStatusBlock=0xaaa6cde640 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cde5d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b533c0, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cde5d8 [0x34]) => 0
NtClose(Handle=0xc4) => 0
NtOpenFile(FileHandle=0xaaa6cde5c8 [0xc4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\xtajit64se.dll", IoStatusBlock=0xaaa6cde640 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cde5d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b533c0, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cde5d8 [0x34]) => 0
NtClose(Handle=0xc4) => 0
NtOpenFile(FileHandle=0xaaa6cde5c8 [0xc4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNEL32.DLL", IoStatusBlock=0xaaa6cde640 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cde5d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b533c0, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cde5d8 [0x34]) => 0
NtClose(Handle=0xc4) => 0
NtOpenFile(FileHandle=0xaaa6cde5c8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNELBASE.dll", IoStatusBlock=0xaaa6cde640 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cde5d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b533c0, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cde5d8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenKey(KeyHandle=0xaaa6cde0a8 [0xc4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xc4, ValueName="StagedDelete_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xaaa6cde0e0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc4) => 0
NtOpenKey(KeyHandle=0xaaa6cde0a8 [0xd4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xaaa6cde0e0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryValueKey(KeyHandle=0xd4, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b54700, Length=0x48, ResultLength=0xaaa6cde0e0 [0x46]) => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="MergeVer_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde080, Length=0x14, ResultLength=0xaaa6cde070 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="MergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde080, Length=0x14, ResultLength=0xaaa6cde070 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="MinMergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde080, Length=0x14, ResultLength=0xaaa6cde070 [0x10]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD2B3C9708CF2D.sysmain.sdb", IoStatusBlock=0xaaa6cde000 [0/0x48], FileInformation=0xaaa6cde080, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\sysmain.sdb", IoStatusBlock=0xaaa6cde000 [0/0x48], FileInformation=0xaaa6cde080, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtOpenKey(KeyHandle=0xaaa6cddfb8 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cddf90, Length=0x14, ResultLength=0xaaa6cddf80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0xaaa6cde008 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b54890, Length=0x28, ResultLength=0xaaa6cde0a4 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b54890, Length=0x28, ResultLength=0xaaa6cde0a4 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x28e72b548f0, Length=0x230, ResultLength=0xaaa6cde0a4 [0x74]) => 0
NtClose(Handle=0xd8) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\apppatch\MergeSdbFilesSource\sysMerge.sdb", IoStatusBlock=0xaaa6cde000 [0/0x48], FileInformation=0xaaa6cde080, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtClose(Handle=0xd4) => 0
NtCreateFile(FileHandle=0xaaa6cde190 [0xd4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD2B3C9708CF2D.sysmain.sdb", IoStatusBlock=0xaaa6cde1a0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryInformationFile(FileHandle=0xd4, IoStatusBlock=0xaaa6cde230 [0/0x18], FileInformation=0xaaa6cde240, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtQueryInformationFile(FileHandle=0xd4, IoStatusBlock=0xaaa6cde220 [0/0x18], FileInformation=0xaaa6cde230, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtCreateSection(SectionHandle=0xaaa6cde1d0 [0xdc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0xd4) => 0
NtMapViewOfSection(SectionHandle=0xdc, ProcessHandle=-1, BaseAddress=0xaaa6cde1d8 [0x00007ff3f8a20000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xaaa6cde1e0 [0x0040d000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtOpenKey(KeyHandle=0xaaa6cde188 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde160, Length=0x14, ResultLength=0xaaa6cde150) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtOpenKey(KeyHandle=0xaaa6cde1d8 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xe0, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b54780, Length=0x28, ResultLength=0xaaa6cde274 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xe0, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b54780, Length=0x28, ResultLength=0xaaa6cde274 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xe0, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x28e72b54930, Length=0x230, ResultLength=0xaaa6cde274 [0x74]) => 0
NtClose(Handle=0xe0) => 0
NtOpenKey(KeyHandle=0xaaa6cde0d8 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="StagedDelete_sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xaaa6cde110) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtOpenKey(KeyHandle=0xaaa6cde0d8 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xaaa6cde110) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenProcess(ProcessHandle=0xaaa6cddf60 [0xe0], DesiredAccess=0x1000, ObjectAttributes=null, ClientId=0xaaa6cddf68 [0x28e4/0]) => 0
NtOpenProcessToken(ProcessHandle=0xe0, DesiredAccess=0x8, TokenHandle=0xaaa6cddf30 [0xe4]) => 0
NtQueryInformationToken(TokenHandle=0xe4, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=null, Length=0, ReturnLength=0xaaa6cddea0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryInformationToken(TokenHandle=0xe4, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=0x28e72b54a60, Length=0xe8, ReturnLength=0xaaa6cddea0 [0xe8]) => 0
NtClose(Handle=0xe4) => 0
NtCreateFile(FileHandle=0xaaa6cddd90 [0xe4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0xaaa6cddd20 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0xaaa6cddc88 [0xe8], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xe8, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x28e72b54d80, Length=0x208, ResultLength=0xaaa6cddc80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe8) => 0
NtApphelpCacheControl(ServiceClass=0, ServiceData="") => 0
NtClose(Handle=0xe4) => 0
NtCreateFile(FileHandle=0xaaa6cddbc8 [0xe4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0xaaa6cddb30 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0xaaa6cdda98 [0xec], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xec, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x28e72b54d80, Length=0x208, ResultLength=0xaaa6cdda90) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xec) => 0
NtApphelpCacheControl(ServiceClass=2, ServiceData="") => 0
NtClose(Handle=0xe4) => 0
NtClose(Handle=0xe0) => 0
NtOpenMutant(MutantHandle=0xaaa6cde348, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0x9c:"Local\ShimViewer") => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd4) => 0
NtClose(Handle=0xdc) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x7ff3f8a20000) => 0
Loaded DLL at 00007FF9BEE00000 C:\WINDOWS\System32\ucrtbase.dll
NtMapViewOfSection(SectionHandle=0x100, ProcessHandle=-1, BaseAddress=0x28e72b53e60 [0x00007ff9bee00000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b53d88 [0x00229000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", Attributes=0xaaa6cde9a0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdead8 [0xec], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0xaaa6cdeb40 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdeae0 [0xe0], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xec) => 0
Loaded DLL at 00007FF915490000 C:\Program Files\Python314\python314.dll
NtMapViewOfSection(SectionHandle=0xe0, ProcessHandle=-1, BaseAddress=0x28e72b53740 [0x00007ff915490000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b53688 [0x006f6000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x19 [TokenIntegrityLevel], TokenInformation=0xaaa6cdd840, Length=0x58, ReturnLength=0xaaa6cdd830 [0x1c]) => 0
NtOpenKey(KeyHandle=0xaaa6cdd7d8 [0x104], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide") => 0
NtQueryValueKey(KeyHandle=0x104, ValueName="PreferExternalManifest", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdd820, Length=0x14, ResultLength=0xaaa6cdd7d0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0xaaa6cdd968 [0x108], DesiredAccess=FILE_GENERIC_READ, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0xaaa6cdda00 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtQueryVolumeInformationFile(FileHandle=0x108, IoStatusBlock=0xaaa6cdd8b0 [0/8], FsInformation=0xaaa6cdd8a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtClose(Handle=0x108) => 0
Loaded DLL at 00007FF9C0F80000 C:\WINDOWS\System32\WS2_32.dll
NtMapViewOfSection(SectionHandle=0x108, ProcessHandle=-1, BaseAddress=0x28e72b59e50 [0x00007ff9c0f80000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b59da8 [0x000d9000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1A20000 C:\WINDOWS\System32\RPCRT4.dll
NtMapViewOfSection(SectionHandle=0x10c, ProcessHandle=-1, BaseAddress=0x28e72b56570 [0x00007ff9c1a20000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b564c8 [0x00203000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0120000 C:\WINDOWS\System32\ADVAPI32.dll
NtMapViewOfSection(SectionHandle=0x108, ProcessHandle=-1, BaseAddress=0x28e72b56f70 [0x00007ff9c0120000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b56eb8 [0x0014d000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C18D0000 C:\WINDOWS\System32\msvcrt.dll
NtMapViewOfSection(SectionHandle=0x110, ProcessHandle=-1, BaseAddress=0x28e72b57630 [0x00007ff9c18d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b57588 [0x00148000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1510000 C:\WINDOWS\System32\sechost.dll
NtMapViewOfSection(SectionHandle=0x110, ProcessHandle=-1, BaseAddress=0x28e72b5a380 [0x00007ff9c1510000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b5a2a8 [0x00126000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", Attributes=0xaaa6cde9a0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdead8 [0x114], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", IoStatusBlock=0xaaa6cdeb40 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdeae0 [0x118], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x114) => 0
Loaded DLL at 00007FF9849C0000 C:\Program Files\Python314\VCRUNTIME140.dll
NtMapViewOfSection(SectionHandle=0x118, ProcessHandle=-1, BaseAddress=0x28e72b53ac0 [0x00007ff9849c0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b53a08 [0x0002c000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VERSION.dll", Attributes=0xaaa6cde9a0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", Attributes=0xaaa6cde9a0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdead8 [0xec], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", IoStatusBlock=0xaaa6cdeb40 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdeae0 [0xe0], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xec) => 0
Loaded DLL at 00007FF99FE40000 C:\WINDOWS\SYSTEM32\VERSION.dll
NtMapViewOfSection(SectionHandle=0xe0, ProcessHandle=-1, BaseAddress=0x28e72b59ae0 [0x00007ff99fe40000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b54878 [0x00016000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\bcrypt.dll", Attributes=0xaaa6cde9a0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", Attributes=0xaaa6cde9a0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdead8 [0x114], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", IoStatusBlock=0xaaa6cdeb40 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdeae0 [0xec], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x114) => 0
Loaded DLL at 00007FF9BE440000 C:\WINDOWS\SYSTEM32\bcrypt.dll
NtMapViewOfSection(SectionHandle=0xec, ProcessHandle=-1, BaseAddress=0x28e72b56bf0 [0x00007ff9be440000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b56b48 [0x0004d000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", Attributes=0xaaa6cde9a0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdeb88 [0x118], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\msvcrt.dll", IoStatusBlock=0xaaa6cdec00 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdeb98) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdeb98 [0x34]) => 0
NtClose(Handle=0x118) => 0
NtOpenFile(FileHandle=0xaaa6cdebb8 [0xe0], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", IoStatusBlock=0xaaa6cdec30 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebc8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdebc8 [0x34]) => 0
NtClose(Handle=0xe0) => 0
NtOpenFile(FileHandle=0xaaa6cdeb88 [0x11c], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\ucrtbase.dll", IoStatusBlock=0xaaa6cdec00 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x11c, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdeb98) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x11c, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdeb98 [0x34]) => 0
NtClose(Handle=0x11c) => 0
NtOpenFile(FileHandle=0xaaa6cdeb88 [0x118], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\RPCRT4.dll", IoStatusBlock=0xaaa6cdec00 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdeb98) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdeb98 [0x34]) => 0
NtClose(Handle=0x118) => 0
NtOpenFile(FileHandle=0xaaa6cdebb8 [0x118], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\WS2_32.dll", IoStatusBlock=0xaaa6cdec30 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebc8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x118, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdebc8 [0x34]) => 0
NtClose(Handle=0x118) => 0
NtOpenFile(FileHandle=0xaaa6cdeb88 [0xe0], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\sechost.dll", IoStatusBlock=0xaaa6cdec00 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdeb98) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdeb98 [0x34]) => 0
NtClose(Handle=0xe0) => 0
NtOpenFile(FileHandle=0xaaa6cdebb8 [0x108], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", IoStatusBlock=0xaaa6cdec30 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebc8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdebc8 [0x34]) => 0
NtClose(Handle=0x108) => 0
NtOpenFile(FileHandle=0xaaa6cdebb8 [0x108], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\ADVAPI32.dll", IoStatusBlock=0xaaa6cdec30 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebc8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa20, SecurityDescriptorLength=0x34, ReturnLength=0xaaa6cdebc8 [0x34]) => 0
NtClose(Handle=0x108) => 0
NtOpenFile(FileHandle=0xaaa6cdebb8 [0xe0], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", IoStatusBlock=0xaaa6cdec30 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebc8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa30, SecurityDescriptorLength=0x20, ReturnLength=0xaaa6cdebc8 [0x20]) => 0
NtClose(Handle=0xe0) => 0
NtOpenFile(FileHandle=0xaaa6cdebe8 [0x108], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0xaaa6cdec60 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xaaa6cdebf8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x108, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x28e72b5aa30, SecurityDescriptorLength=0x20, ReturnLength=0xaaa6cdebf8 [0x20]) => 0
NtClose(Handle=0x108) => 0
Initial breakpoint
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cde960 [0/8], FsInformation=0xaaa6cde950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cde960 [0/8], FsInformation=0xaaa6cde950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cde960 [0/8], FsInformation=0xaaa6cde950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtOpenKey(KeyHandle=0xaaa6cddc80 [0xe0], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\Sorting\Versions") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xaaa6cddca0, Length=0x214, ResultLength=0xaaa6cddee0 [0x2a]) => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="000605xx", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xaaa6cdd6a0, Length=0x214, ResultLength=0xaaa6cdd8d0 [0x42]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cde9c8 [0x00007ff9bf020000], Size=0xaaa6cde9c0 [0x1000], NewProtect=2, OldProtect=0xaaa6cdea00 [8]) => 0
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cde990 [0/8], FsInformation=0xaaa6cde980, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cde990 [0/8], FsInformation=0xaaa6cde980, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cde990 [0/8], FsInformation=0xaaa6cde980, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cddc08 [0x00007ff9bf020000], Size=0xaaa6cddc00 [0x1000], NewProtect=4, OldProtect=0xaaa6cddc40 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cddc08 [0x00007ff9bf020000], Size=0xaaa6cddc00 [0x1000], NewProtect=2, OldProtect=0xaaa6cddc40 [4]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x56 [ProcessEnclaveInformation], ProcessInformation=0xaaa6cde9c0, Length=0xb0, ReturnLength=null) => 0xc0000003 [87 'The parameter is incorrect.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0xaaa6cde980, Length=0x40, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x2b [ProcessImageFileNameWin32], ProcessInformation=0x28e72b61280, Length=0x218, ReturnLength=null) => 0
NtCreateEvent(EventHandle=0xaaa6cde8e8 [0x148], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtOpenFile(FileHandle=0x7ff9be4861f0 [0x14c], DesiredAccess=SYNCHRONIZE|0x3, ObjectAttributes="\Device\KsecDD", IoStatusBlock=0xaaa6cde880 [0/0], ShareAccess=7, OpenOptions=0x20) => 0
NtDeviceIoControlFile(FileHandle=0x14c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde8e0 [0/0], IoControlCode=0x00390400, InputBuffer=0xaaa6cde9a0, InputBufferLength=0x68, OutputBuffer=0xaaa6cde8f0, OutputBufferLength=8) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0xaaa6cde770, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0xaaa6cde760, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0xaaa6cde6f0, Length=0x40, ReturnLength=null) => 0
NtTestAlert() => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=0 [MemoryBasicInformation], MemoryInformation=0xaaa6cdfa60, Length=0x30, ReturnLength=0xaaa6cdfa50 [0x30]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=3 [MemoryRegionInformation], MemoryInformation=0xaaa6cdfa90, Length=0x30, ReturnLength=null) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=2 [MemoryMappedFilenameInformation], MemoryInformation=0xaaa6cdfaf8, Length=0x21a, ReturnLength=null) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=4, OldProtect=0xaaa6cdf8d0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdf898 [0x00007ff9bf020000], Size=0xaaa6cdf890 [0x1000], NewProtect=2, OldProtect=0xaaa6cdf8d0 [4]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0xa [TokenStatistics], TokenInformation=0xaaa6cdecb0, Length=0x38, ReturnLength=0xaaa6cdeca0 [0x38]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=1 [TokenUser], TokenInformation=0x28e72b699f0, Length=0x54, ReturnLength=0xaaa6cdeca0 [0x2c]) => 0
NtOpenKey(KeyHandle=0xaaa6cdecd0 [0x10c], DesiredAccess=KEY_READ, ObjectAttributes=0x110:"Control Panel\International") => 0
NtClose(Handle=0x110) => 0
NtCreateEvent(EventHandle=0xaaa6cdec88 [0x160], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x10c, Event=0x160, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec11b90 [0/0], CompletionFilter=0x10000005, WatchTree=true, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtQueryMultipleValueKey(KeyHandle=0x10c, ListOfValuesToQuery=0x28e72b6a0a0, NumberOfItems=0x1e, ValueInformation=0x28e72b699f0, Length=0xaaa6cdec54 [0x108], ReturnLength=0xaaa6cdec50 [0x108]) => 0
NtQueryValueKey(KeyHandle=0x10c, ValueName="sCurrency", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b699f0, Length=0xb6, ResultLength=0xaaa6cdec50 [0x10]) => 0
NtQueryValueKey(KeyHandle=0x10c, ValueName="iCalendarType", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x28e72b699f0, Length=0xb6, ResultLength=0xaaa6cdec50 [0x10]) => 0
NtOpenKey(KeyHandle=0xaaa6cdeb08, DesiredAccess=0x1, ObjectAttributes=0x10c:"invalid string") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cde348 [0x164], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\CustomLocale") => 0
NtQueryValueKey(KeyHandle=0x164, ValueName="en-US", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xaaa6cdea08, Length=0x214, ResultLength=0xaaa6cde340) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x164) => 0
NtOpenKey(KeyHandle=0xaaa6cde348 [0x164], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\ExtendedLocale") => 0
NtQueryValueKey(KeyHandle=0x164, ValueName="en-US", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xaaa6cdea08, Length=0x214, ResultLength=0xaaa6cde340) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x164) => 0
NtWaitForSingleObject(Handle=0x160, Alertable=false, Timeout=0xaaa6cdebc8 [0]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtWaitForSingleObject(Handle=0x160, Alertable=false, Timeout=0xaaa6cdebc8 [0]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtDeviceIoControlFile(FileHandle=0x14c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf420 [0/0xd8], IoControlCode=0x00390400, InputBuffer=0xaaa6cdf528, InputBufferLength=0x30, OutputBuffer=0x28e72b6aa60, OutputBufferLength=0x180) => 0
NtDeviceIoControlFile(FileHandle=0x14c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdee30 [0/0xd8], IoControlCode=0x00390400, InputBuffer=0xaaa6cdef48, InputBufferLength=0x38, OutputBuffer=0x28e72b6ac10, OutputBufferLength=0x180) => 0
Loaded DLL at 00007FF9BF190000 C:\WINDOWS\System32\bcryptprimitives.dll
NtMapViewOfSection(SectionHandle=0x164, ProcessHandle=-1, BaseAddress=0x28e72b6b450 [0x00007ff9bf190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b6b368 [0x000ff000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x56 [ProcessEnclaveInformation], ProcessInformation=0xaaa6cdea20, Length=0xb0, ReturnLength=null) => 0xc0000003 [87 'The parameter is incorrect.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0xaaa6cdeab0, Length=0x40, ReturnLength=null) => 0
NtOpenFile(FileHandle=0xaaa6cde8d0 [0x168], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\Device\CNG", IoStatusBlock=0xaaa6cde8f0 [0/0], ShareAccess=7, OpenOptions=0x20) => 0
NtDeviceIoControlFile(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde8b0 [0/0x30], IoControlCode=0x00390008, InputBuffer=null, InputBufferLength=0, OutputBuffer=0xaaa6cde990, OutputBufferLength=0x30) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cde7f8 [0x16c], DesiredAccess=MAXIMUM_ALLOWED, ObjectAttributes="\REGISTRY\MACHINE", OpenOptions=0) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cde740, Length=4, ResultLength=0xaaa6cde744 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cde7b8 [0x170], DesiredAccess=0x1, ObjectAttributes=0x16c:"System\CurrentControlset\Control\Lsa", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x170, ValueName="LsaPid", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cde820, Length=0x10, ResultLength=0xaaa6cde7e0 [0x10]) => 0
NtClose(Handle=0x170) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cdf5b0 [0x0000028e7bb30000], ZeroBits=0, pSize=0xaaa6cdf5b8 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cdf4b0 [0x0000028e7bb00000], ZeroBits=0, pSize=0xaaa6cdf4b8 [0x4000], flAllocationType=0x3000, flProtect=4) => 0
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\pyvenv.cfg", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\pyvenv.cfg", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0xaaa6cdea18 [0x110], DesiredAccess=SYNCHRONIZE|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0xaaa6cdea50 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x4020, EaBuffer=null, EaLength=0) => 0
NtQueryObject(ObjectHandle=0x110, ObjectInformationClass=1 [ObjectNameInformation], ObjectInformation=0x28e72c25a80, Length=0x218, ReturnLength=0xaaa6cdeaf0 [0x86]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdeaf0 [0/0x4a], FileInformation=0x28e72c26340, Length=0x210, FileInformationClass=9 [FileNameInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cde928 [0x174], DesiredAccess=SYNCHRONIZE|0x80, ObjectAttributes="\??\MountPointManager", IoStatusBlock=0xaaa6cde960 [0/0], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtDeviceIoControlFile(FileHandle=0x174, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdea90 [0/0xc], IoControlCode=0x006d0030, InputBuffer=0x28e72c26580, InputBufferLength=0x32, OutputBuffer=0x28e72c265f8, OutputBufferLength=0x210) => 0
NtClose(Handle=0x174) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdeaf0 [0/0x4a], FileInformation=0x28e72c26840, Length=0x210, FileInformationClass=0x30 [FileNormalizedNameInformation]) => 0
NtClose(Handle=0x110) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python.exe", Attributes=0xaaa6cdeb20 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python314._pth", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python._pth", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python._pth", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0xaaa6cdea88, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\pybuilddir.txt", IoStatusBlock=0xaaa6cdeac0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", Attributes=0xaaa6cded80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\os.py", Attributes=0xaaa6cde4f0 [ARCHIVE]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", Attributes=0xaaa6cded80 [DIRECTORY]) => 0
NtQueryKey(KeyHandle=0x180, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdead0, Length=4, ResultLength=0xaaa6cdead4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdeb48, DesiredAccess=KEY_READ, ObjectAttributes=0x180:"SOFTWARE\Python\PythonCore\3.14\PythonPath", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdeb40, DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\machine") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdeb40, DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\user") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenFile(FileHandle=0xaaa6cddc20 [0x174], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\System32\en-US\KERNELBASE.dll.mui", IoStatusBlock=0xaaa6cddc30 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cddc40 [0x184], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x174) => 0
NtMapViewOfSection(SectionHandle=0x184, ProcessHandle=-1, BaseAddress=0xaaa6cddc48 [0x0000028e7bc30000], ZeroBits=0, CommitSize=0, SectionOffset=0xaaa6cddca0 [0], ViewSize=0xaaa6cddc50 [0x00153000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdebb0, Length=4, ResultLength=0xaaa6cdebb4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdec28 [0x184], DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"SOFTWARE\Python\PythonCore\3.14\PythonPath", OpenOptions=0) => 0
NtEnumerateKey(KeyHandle=0x184, Index=0, KeyInformationClass=0 [KeyBasicInformation], KeyInformation=0xaaa6cde948, Length=0x120, ResultLength=0xaaa6cde920) => 0x8000001a [259 'No more data is available.']
NtClose(Handle=0x184) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cdd140 [0x0000028e7be90000], ZeroBits=0, pSize=0xaaa6cdd148 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtQuerySystemInformation(SystemInformationClass=0x2c [SystemCurrentTimeZoneInformation], SystemInformation=0xaaa6cdccd8, Length=0xac, ReturnLength=null) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", Attributes=0xaaa6cdc2a0 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0xaaa6cdc448 [0x184], DesiredAccess=SYNCHRONIZE|GENERIC_READ|GENERIC_EXECUTE|0x80, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", IoStatusBlock=0xaaa6cdc480 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtCreateSection(SectionHandle=0xaaa6cdc600 [0x188], DesiredAccess=0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x11000000, FileHandle=0x184) => 0
NtMapViewOfSection(SectionHandle=0x188, ProcessHandle=-1, BaseAddress=0xaaa6cdc5f8 [0x0000028e7bb10000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xaaa6cdc608 [0x3000], InheritDisposition=1 [ViewShare], AllocationType=0x00040000, Protect=2) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtClose(Handle=0x188) => 0
NtClose(Handle=0x184) => 0
NtOpenFile(FileHandle=0xaaa6cdb860 [0x104], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\en-US\tzres.dll.mui", IoStatusBlock=0xaaa6cdb870 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdb880 [0x110], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x104) => 0
NtMapViewOfSection(SectionHandle=0x110, ProcessHandle=-1, BaseAddress=0xaaa6cdb888 [0x0000028e7bf90000], ZeroBits=0, CommitSize=0, SectionOffset=0xaaa6cdb8e0 [0], ViewSize=0xaaa6cdb890 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x28e7bb10000) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", Attributes=0xaaa6cdc2a0 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0xaaa6cdc448 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_READ|GENERIC_EXECUTE|0x80, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", IoStatusBlock=0xaaa6cdc480 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtCreateSection(SectionHandle=0xaaa6cdc600 [0x110], DesiredAccess=0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x11000000, FileHandle=0x104) => 0
NtMapViewOfSection(SectionHandle=0x110, ProcessHandle=-1, BaseAddress=0xaaa6cdc5f8 [0x0000028e7bb10000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xaaa6cdc608 [0x3000], InheritDisposition=1 [ViewShare], AllocationType=0x00040000, Protect=2) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtClose(Handle=0x110) => 0
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0xaaa6cdb860 [0x104], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\en-US\tzres.dll.mui", IoStatusBlock=0xaaa6cdb870 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdb880 [0x184], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x104) => 0
NtMapViewOfSection(SectionHandle=0x184, ProcessHandle=-1, BaseAddress=0xaaa6cdb888 [0x0000028e7bf90000], ZeroBits=0, CommitSize=0, SectionOffset=0xaaa6cdb8e0 [0], ViewSize=0xaaa6cdb890 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x28e7bb10000) => 0
NtQuerySystemInformation(SystemInformationClass=0x2c [SystemCurrentTimeZoneInformation], SystemInformation=0xaaa6cdcf78, Length=0xac, ReturnLength=null) => 0
NtCreateTimer2(TimerHandle=0xaaa6cdd0c0 [0x104], Unknown1=null, ObjectAttributes=null, Attributes=4, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3) => 0
NtClose(Handle=0x104) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", IoStatusBlock=0xaaa6cddaf0, FileInformation=0xaaa6cddc60, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cddbd0 [0/0x68], FileInformation=0xaaa6cddd40, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", IoStatusBlock=0xaaa6cde690, FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cddbd0 [0/0x68], FileInformation=0xaaa6cddd40, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cde220 [0x170], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\DLLs\", IoStatusBlock=0xaaa6cde290 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde290 [0/0x60], FileInformation=0xaaa6cde2d0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde570 [0/0xe76], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde570 [0/0xdfc], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde570 [0/0xc00], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde570, FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cddbd0 [0/0x68], FileInformation=0xaaa6cddd40, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cde300 [0x170], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\", IoStatusBlock=0xaaa6cde370 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde370 [0/0x60], FileInformation=0xaaa6cde3b0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe9c], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe58], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe8a], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe0a], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe62], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0xe5a], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650 [0/0x1dc], FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde650, FileInformation=0x28e72c3df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.cp314-win_amd64.pyd", IoStatusBlock=0xaaa6cde690, FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.pyd", IoStatusBlock=0xaaa6cde690, FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.py", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.py", IoStatusBlock=0xaaa6cde690 [0/0x68], FileInformation=0xaaa6cde800, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cde008 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\__init__.cpython-314.pyc", IoStatusBlock=0xaaa6cde040 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde180 [0/8], FsInformation=0xaaa6cde170, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde200 [0/8], FsInformation=0xaaa6cde1f0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde130 [0/0x12], FsInformation=0xaaa6cde140, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde130, FileInformation=0xaaa6cde160, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde200 [0/0x28], FileInformation=0xaaa6cde318, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde200 [0/0x18], FileInformation=0xaaa6cde300, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde070 [0/8], FileInformation=0xaaa6cde060, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cde070 [0/0], FileInformation=0xaaa6cde060, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde640 [0/0x1a5d], Buffer=0x28e7bdc68f0, Length=0x1a5e, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde640, Buffer=0x28e7bdc834d, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x104) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdb6c0 [0/0x68], FileInformation=0xaaa6cdb830, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdc180 [0/0x68], FileInformation=0xaaa6cdc2f0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdc180 [0/0x68], FileInformation=0xaaa6cdc2f0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdbdf0 [0x104], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\", IoStatusBlock=0xaaa6cdbe60 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbe60 [0/0x60], FileInformation=0xaaa6cdbea0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140 [0/0xe26], FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140 [0/0xdfa], FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140 [0/0xe0a], FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140 [0/0xe18], FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140 [0/0xec], FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc140, FileInformation=0x28e7bdaf640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x104) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\aliases.py", IoStatusBlock=0xaaa6cdc180 [0/0x68], FileInformation=0xaaa6cdc2f0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\aliases.py", IoStatusBlock=0xaaa6cdc180 [0/0x68], FileInformation=0xaaa6cdc2f0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdbbd8 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\aliases.cpython-314.pyc", IoStatusBlock=0xaaa6cdbc10 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbd50 [0/8], FsInformation=0xaaa6cdbd40, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbdd0 [0/8], FsInformation=0xaaa6cdbdc0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbd00 [0/0x12], FsInformation=0xaaa6cdbd10, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbd00, FileInformation=0xaaa6cdbd30, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbdd0 [0/0x28], FileInformation=0xaaa6cdbee8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbdd0 [0/0x18], FileInformation=0xaaa6cdbed0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbc40 [0/8], FileInformation=0xaaa6cdbc30, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdbc40 [0/0], FileInformation=0xaaa6cdbc30, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc210 [0/0x32b2], Buffer=0x28e7bdd36f0, Length=0x32b3, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc210, Buffer=0x28e7bdd69a2, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x104) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdce50 [0/0x68], FileInformation=0xaaa6cdcfc0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\_win_cp_codecs.py", IoStatusBlock=0xaaa6cdce50 [0/0x68], FileInformation=0xaaa6cdcfc0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\_win_cp_codecs.py", IoStatusBlock=0xaaa6cdce50 [0/0x68], FileInformation=0xaaa6cdcfc0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdc8a8 [0x184], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\_win_cp_codecs.cpython-314.pyc", IoStatusBlock=0xaaa6cdc8e0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdca20 [0/8], FsInformation=0xaaa6cdca10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdcaa0 [0/8], FsInformation=0xaaa6cdca90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdc9d0 [0/0x12], FsInformation=0xaaa6cdc9e0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdc9d0, FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdcaa0 [0/0x28], FileInformation=0xaaa6cdcbb8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdcaa0 [0/0x18], FileInformation=0xaaa6cdcba0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdc910 [0/8], FileInformation=0xaaa6cdc900, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cdc910 [0/0], FileInformation=0xaaa6cdc900, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdcee0 [0/0xdc6], Buffer=0x28e7bdd36f0, Length=0xdc7, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdcee0, Buffer=0x28e7bdd44b6, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cddd80 [0/0x68], FileInformation=0xaaa6cddef0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8.py", IoStatusBlock=0xaaa6cddd80 [0/0x68], FileInformation=0xaaa6cddef0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8.py", IoStatusBlock=0xaaa6cddd80 [0/0x68], FileInformation=0xaaa6cddef0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdd7d8 [0x188], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\utf_8.cpython-314.pyc", IoStatusBlock=0xaaa6cdd810 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd950 [0/8], FsInformation=0xaaa6cdd940, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd9d0 [0/8], FsInformation=0xaaa6cdd9c0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd900 [0/0x12], FsInformation=0xaaa6cdd910, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd900, FileInformation=0xaaa6cdd930, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd9d0 [0/0x28], FileInformation=0xaaa6cddae8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd9d0 [0/0x18], FileInformation=0xaaa6cddad0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd840 [0/8], FileInformation=0xaaa6cdd830, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x188, IoStatusBlock=0xaaa6cdd840 [0/0], FileInformation=0xaaa6cdd830, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdde10 [0/0x925], Buffer=0x28e7bdd36f0, Length=0x926, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdde10, Buffer=0x28e7bdd4015, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x188) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdddb0 [0/0x68], FileInformation=0xaaa6cddf20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\cp1252.py", IoStatusBlock=0xaaa6cdddb0 [0/0x68], FileInformation=0xaaa6cddf20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\cp1252.py", IoStatusBlock=0xaaa6cdddb0 [0/0x68], FileInformation=0xaaa6cddf20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdd808 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\cp1252.cpython-314.pyc", IoStatusBlock=0xaaa6cdd840 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdd980 [0/8], FsInformation=0xaaa6cdd970, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdda00 [0/8], FsInformation=0xaaa6cdd9f0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdd930 [0/0x12], FsInformation=0xaaa6cdd940, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdd930, FileInformation=0xaaa6cdd960, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdda00 [0/0x28], FileInformation=0xaaa6cddb18, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdda00 [0/0x18], FileInformation=0xaaa6cddb00, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdd870 [0/8], FileInformation=0xaaa6cdd860, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x104, IoStatusBlock=0xaaa6cdd870 [0/0], FileInformation=0xaaa6cdd860, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdde40 [0/0xd44], Buffer=0x28e7bdd36f0, Length=0xd45, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x104, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdde40, Buffer=0x28e7bdd4434, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x104) => 0
NtCreateEvent(EventHandle=0xaaa6cdf908 [0x104], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cdf880 [0/8], FsInformation=0xaaa6cdf870, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x90, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf130, IoControlCode=0x00500016, InputBuffer=0xaaa6cdf140, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cdf1d0 [0/8], FsInformation=0xaaa6cdf1c0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cdf040 [0/8], FileInformation=0xaaa6cdf030, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x370, IoStatusBlock=0xaaa6cdf040, FileInformation=0xaaa6cdf030, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0xc000000d [87 'The parameter is incorrect.']
NtQueryVolumeInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf880 [0/8], FsInformation=0xaaa6cdf870, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x90, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf130, IoControlCode=0x00500016, InputBuffer=0xaaa6cdf140, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf1d0 [0/8], FsInformation=0xaaa6cdf1c0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf100 [0/0x12], FsInformation=0xaaa6cdf110, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf100, FileInformation=0xaaa6cdf130, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf1d0 [0/0x28], FileInformation=0xaaa6cdf2e8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf1d0 [0/0x18], FileInformation=0xaaa6cdf2d0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtSetInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf040 [0/0], FileInformation=0xaaa6cdf030, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x9ac, IoStatusBlock=0xaaa6cdf240 [0/0], FileInformation=0xaaa6cdf230, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cdf880 [0/8], FsInformation=0xaaa6cdf870, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x90, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf130, IoControlCode=0x00500016, InputBuffer=0xaaa6cdf140, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cdf1d0 [0/8], FsInformation=0xaaa6cdf1c0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cdf040 [0/8], FileInformation=0xaaa6cdf030, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1f0, IoStatusBlock=0xaaa6cdf040, FileInformation=0xaaa6cdf030, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0xc000000d [87 'The parameter is incorrect.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\pyvenv.cfg", IoStatusBlock=0xaaa6cdd250, FileInformation=0xaaa6cdd3e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\pyvenv.cfg", IoStatusBlock=0xaaa6cdd330, FileInformation=0xaaa6cdd4c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\AppData\Roaming\Python\Python314\site-packages", IoStatusBlock=0xaaa6cddc10, FileInformation=0xaaa6cddda0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc000003a [3 'The system cannot find the path specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cddc10 [0/0x68], FileInformation=0xaaa6cddda0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdd7e0 [0x188], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\", IoStatusBlock=0xaaa6cdd850 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdd850 [0/0x60], FileInformation=0xaaa6cdd890, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddb30 [0/0x882], FileInformation=0x28e72bf1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddb30, FileInformation=0x28e72bf1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x188) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cddcf0 [0/0x68], FileInformation=0xaaa6cdde80, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdd8c0 [0x188], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\", IoStatusBlock=0xaaa6cdd930 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdd930 [0/0x60], FileInformation=0xaaa6cdd970, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddc10 [0/0x75c], FileInformation=0x28e72bf1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddc10, FileInformation=0x28e72bf1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x188) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32.pth", IoStatusBlock=0xaaa6cddba0 [0/0x68], FileInformation=0xaaa6cddd10, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdd5c8 [0x18c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32.pth", IoStatusBlock=0xaaa6cdd600 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd740 [0/8], FsInformation=0xaaa6cdd730, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd7c0 [0/8], FsInformation=0xaaa6cdd7b0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd6f0 [0/0x12], FsInformation=0xaaa6cdd700, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd6f0, FileInformation=0xaaa6cdd720, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd7c0 [0/0x28], FileInformation=0xaaa6cdd8d8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd7c0 [0/0x18], FileInformation=0xaaa6cdd8c0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd630 [0/8], FileInformation=0xaaa6cdd620, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdd630 [0/0], FileInformation=0xaaa6cdd620, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x18c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddc00 [0/0xb9], Buffer=0x28e7bf259b0, Length=0xba, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x18c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cddc00, Buffer=0x28e7bf25a69, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x18c) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0xaaa6cdc0e0 [0/0x68], FileInformation=0xaaa6cdc250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8_sig.py", IoStatusBlock=0xaaa6cdc0e0 [0/0x68], FileInformation=0xaaa6cdc250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8_sig.py", IoStatusBlock=0xaaa6cdc0e0 [0/0x68], FileInformation=0xaaa6cdc250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdbb38 [0x18c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\utf_8_sig.cpython-314.pyc", IoStatusBlock=0xaaa6cdbb70 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbcb0 [0/8], FsInformation=0xaaa6cdbca0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbd30 [0/8], FsInformation=0xaaa6cdbd20, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbc60 [0/0x12], FsInformation=0xaaa6cdbc70, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbc60, FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbd30 [0/0x28], FileInformation=0xaaa6cdbe48, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbd30 [0/0x18], FileInformation=0xaaa6cdbe30, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbba0 [0/8], FileInformation=0xaaa6cdbb90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x18c, IoStatusBlock=0xaaa6cdbba0 [0/0], FileInformation=0xaaa6cdbb90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x18c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc170 [0/0x1c2b], Buffer=0x28e7be70d10, Length=0x1c2c, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x18c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc170, Buffer=0x28e7be7293b, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x18c) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cddc00 [0/0x68], FileInformation=0xaaa6cddd90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cddce0 [0/0x68], FileInformation=0xaaa6cdde70, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cddce0 [0/0x68], FileInformation=0xaaa6cdde70, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdb810 [0/0x68], FileInformation=0xaaa6cdb980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdbf40 [0x184], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\", IoStatusBlock=0xaaa6cdbfb0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbfb0 [0/0x60], FileInformation=0xaaa6cdbff0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0x882], FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290, FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdb810 [0/0x68], FileInformation=0xaaa6cdb980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdbf40 [0x184], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\", IoStatusBlock=0xaaa6cdbfb0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbfb0 [0/0x60], FileInformation=0xaaa6cdbff0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0x75c], FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290, FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdb810 [0/0x68], FileInformation=0xaaa6cdb980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdbf40 [0x184], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\", IoStatusBlock=0xaaa6cdbfb0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbfb0 [0/0x60], FileInformation=0xaaa6cdbff0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0xe68], FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0x6e4], FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290, FileInformation=0x28e7be52d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdb810 [0/0x68], FileInformation=0xaaa6cdb980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdbf40 [0x184], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\", IoStatusBlock=0xaaa6cdbfb0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbfb0 [0/0x60], FileInformation=0xaaa6cdbff0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0xe92], FileInformation=0x28e7be53540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290 [0/0x274], FileInformation=0x28e7be53540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc290, FileInformation=0x28e7be53540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywin32_bootstrap.py", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywin32_bootstrap.py", IoStatusBlock=0xaaa6cdc2d0 [0/0x68], FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdbd28 [0x190], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-314.pyc", IoStatusBlock=0xaaa6cdbd60 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbea0 [0/8], FsInformation=0xaaa6cdbe90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbf20 [0/8], FsInformation=0xaaa6cdbf10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbe50 [0/0x12], FsInformation=0xaaa6cdbe60, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbe50, FileInformation=0xaaa6cdbe80, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbf20 [0/0x28], FileInformation=0xaaa6cdc038, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbf20 [0/0x18], FileInformation=0xaaa6cdc020, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbd90 [0/8], FileInformation=0xaaa6cdbd80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cdbd90 [0/0], FileInformation=0xaaa6cdbd80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x190, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc360 [0/0x225], Buffer=0x28e7bd97940, Length=0x226, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x190, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc360, Buffer=0x28e7bd97b65, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x190) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.cp314-win_amd64.pyd", IoStatusBlock=0xaaa6cdaa90, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyd", IoStatusBlock=0xaaa6cdaa90, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.py", IoStatusBlock=0xaaa6cdaa90, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyw", IoStatusBlock=0xaaa6cdaa90, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyc", IoStatusBlock=0xaaa6cdaa90, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cd9fd0 [0/0x68], FileInformation=0xaaa6cda140, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cdaa90 [0/0x68], FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cda700 [0x1a0], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin\", IoStatusBlock=0xaaa6cda770 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cda770 [0/0x60], FileInformation=0xaaa6cda7b0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdaa50 [0/0x4aa], FileInformation=0x28e7be545a0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdaa50, FileInformation=0x28e7be545a0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", IoStatusBlock=0xaaa6cdb710 [0/0x68], FileInformation=0xaaa6cdb8a0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", Attributes=0xaaa6cdb850 [DIRECTORY]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cdcf90 [0/0x68], FileInformation=0xaaa6cdd100, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp_win32.py", IoStatusBlock=0xaaa6cdee60 [0/0x68], FileInformation=0xaaa6cdefd0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cde7d8 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp_win32.py", IoStatusBlock=0xaaa6cde810 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde950 [0/8], FsInformation=0xaaa6cde940, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde9d0 [0/8], FsInformation=0xaaa6cde9c0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde900 [0/0x12], FsInformation=0xaaa6cde910, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde900, FileInformation=0xaaa6cde930, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde9d0 [0/0x28], FileInformation=0xaaa6cdeae8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde9d0 [0/0x18], FileInformation=0xaaa6cdead0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde840 [0/8], FileInformation=0xaaa6cde830, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cde840 [0/0], FileInformation=0xaaa6cde830, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdede0 [0/8], FileInformation=0xaaa6cdedd0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdede0 [0/0], FileInformation=0xaaa6cdedd0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdecc0 [0/0x18], FileInformation=0xaaa6cdecd0, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdecc0 [0/0], FileInformation=0xaaa6cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdede0 [0/8], FileInformation=0xaaa6cdedd0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdede0 [0/0], FileInformation=0xaaa6cdedd0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdecc0 [0/0], FileInformation=0xaaa6cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdec90 [0/0x93f], Buffer=0x28e7bf90080, Length=0x00020000, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdec90, Buffer=0x28e7bf909bf, Length=0x0001f6c1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdecc0 [0/0], FileInformation=0xaaa6cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp_win32.py", IoStatusBlock=0xaaa6cdef20 [0/0x68], FileInformation=0xaaa6cdf090, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdf8c8 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp_win32.py", IoStatusBlock=0xaaa6cdf900 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfa40 [0/8], FsInformation=0xaaa6cdfa30, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryObject(ObjectHandle=0x1a0, ObjectInformationClass=4 [ObjectHandleFlagInformation], ObjectInformation=0xaaa6cdfb70, Length=2, ReturnLength=null) => 0
NtSetInformationObject(Handle=0x1a0, Class=4 [ObjectHandleFlagInformation], Buffer=0xaaa6cdfb70, BufferLength=2) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfb80 [0/8], FsInformation=0xaaa6cdfb70, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfab0 [0/0x12], FsInformation=0xaaa6cdfac0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfab0, FileInformation=0xaaa6cdfae0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfb80 [0/0x28], FileInformation=0xaaa6cdfc98, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdfb80 [0/0x18], FileInformation=0xaaa6cdfc80, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdf980 [0/8], FileInformation=0xaaa6cdf970, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdf980 [0/0], FileInformation=0xaaa6cdf970, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf960 [0/0x93f], Buffer=0x28e7be50cc0, Length=0x1000, ByteOffset=null, Key=null) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdf9a0 [0/8], FileInformation=0xaaa6cdf990, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdf9a0 [0/0], FileInformation=0xaaa6cdf990, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdf9a0 [0/0], FileInformation=0xaaa6cdf990, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf670 [0/0x93f], Buffer=0x28e7be50cc0, Length=0x1000, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf630, Buffer=0x28e7be50cc0, Length=0x1000, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdd610 [0/0x68], FileInformation=0xaaa6cdd780, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cddd40 [0x1a0], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\", IoStatusBlock=0xaaa6cdddb0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdddb0 [0/0x60], FileInformation=0xaaa6cdddf0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde090 [0/0x95a], FileInformation=0x28e7be6a4d0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde090, FileInformation=0x28e7be6a4d0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywintypes.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywintypes.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cddb28 [0x170], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\pywintypes.cpython-314.pyc", IoStatusBlock=0xaaa6cddb60 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddca0 [0/8], FsInformation=0xaaa6cddc90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddd20 [0/8], FsInformation=0xaaa6cddd10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddc50 [0/0x12], FsInformation=0xaaa6cddc60, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddc50, FileInformation=0xaaa6cddc80, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddd20 [0/0x28], FileInformation=0xaaa6cdde38, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddd20 [0/0x18], FileInformation=0xaaa6cdde20, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddb90 [0/8], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cddb90 [0/0], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160 [0/0xfdf], Buffer=0x28e7be6a4f0, Length=0xfe0, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160, Buffer=0x28e7be6b4cf, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdbb20 [0/0x68], FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdbb20 [0/0x68], FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdbb20 [0/0x68], FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__init__.cp314-win_amd64.pyd", IoStatusBlock=0xaaa6cdbb20, FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__init__.pyd", IoStatusBlock=0xaaa6cdbb20, FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__init__.py", IoStatusBlock=0xaaa6cdbb20 [0/0x68], FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__init__.py", IoStatusBlock=0xaaa6cdbb20 [0/0x68], FileInformation=0xaaa6cdbc90, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdb578 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__pycache__\__init__.cpython-314.pyc", IoStatusBlock=0xaaa6cdb5b0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb6f0 [0/8], FsInformation=0xaaa6cdb6e0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb770 [0/8], FsInformation=0xaaa6cdb760, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb6a0 [0/0x12], FsInformation=0xaaa6cdb6b0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb6a0, FileInformation=0xaaa6cdb6d0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb770 [0/0x28], FileInformation=0xaaa6cdb888, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb770 [0/0x18], FileInformation=0xaaa6cdb870, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb5e0 [0/8], FileInformation=0xaaa6cdb5d0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdb5e0 [0/0], FileInformation=0xaaa6cdb5d0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbbb0 [0/0x1212], Buffer=0x28e7be50ce0, Length=0x1213, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdbbb0, Buffer=0x28e7be51ef2, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib", IoStatusBlock=0xaaa6cda620 [0/0x68], FileInformation=0xaaa6cda790, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0xaaa6cdad50 [0x1a0], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\", IoStatusBlock=0xaaa6cdadc0 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdadc0 [0/0x60], FileInformation=0xaaa6cdae00, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0a0 [0/0x5ec], FileInformation=0x28e7be6a4d0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0a0, FileInformation=0x28e7be6a4d0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\_abc.py", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\_abc.py", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdab38 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\importlib\__pycache__\_abc.cpython-314.pyc", IoStatusBlock=0xaaa6cdab70 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdacb0 [0/8], FsInformation=0xaaa6cdaca0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdad30 [0/8], FsInformation=0xaaa6cdad20, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdac60 [0/0x12], FsInformation=0xaaa6cdac70, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdac60, FileInformation=0xaaa6cdac90, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdad30 [0/0x28], FileInformation=0xaaa6cdae48, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdad30 [0/0x18], FileInformation=0xaaa6cdae30, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaba0 [0/8], FileInformation=0xaaa6cdab90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaba0 [0/0], FileInformation=0xaaa6cdab90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb170 [0/0x68e], Buffer=0x28e7be723c0, Length=0x68f, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb170, Buffer=0x28e7be72a4e, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\types.py", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\types.py", IoStatusBlock=0xaaa6cdb0e0 [0/0x68], FileInformation=0xaaa6cdb250, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdab38 [0x170], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\types.cpython-314.pyc", IoStatusBlock=0xaaa6cdab70 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdacb0 [0/8], FsInformation=0xaaa6cdaca0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdad30 [0/8], FsInformation=0xaaa6cdad20, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdac60 [0/0x12], FsInformation=0xaaa6cdac70, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdac60, FileInformation=0xaaa6cdac90, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdad30 [0/0x28], FileInformation=0xaaa6cdae48, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdad30 [0/0x18], FileInformation=0xaaa6cdae30, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdaba0 [0/8], FileInformation=0xaaa6cdab90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x170, IoStatusBlock=0xaaa6cdaba0 [0/0], FileInformation=0xaaa6cdab90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb170 [0/0x3dec], Buffer=0x28e7be56610, Length=0x3ded, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb170, Buffer=0x28e7be5a3fc, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\typing.py", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\typing.py", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdc2e8 [0x110], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\typing.cpython-314.pyc", IoStatusBlock=0xaaa6cdc320 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc460 [0/8], FsInformation=0xaaa6cdc450, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc4e0 [0/8], FsInformation=0xaaa6cdc4d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc410 [0/0x12], FsInformation=0xaaa6cdc420, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc410, FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc4e0 [0/0x28], FileInformation=0xaaa6cdc5f8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc4e0 [0/0x18], FileInformation=0xaaa6cdc5e0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc350 [0/8], FileInformation=0xaaa6cdc340, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc350 [0/0], FileInformation=0xaaa6cdc340, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc910 [0/8], FileInformation=0xaaa6cdc900, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdc910 [0/0], FileInformation=0xaaa6cdc900, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x110, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc920 [0/0x00029f1d], Buffer=0x28e7bfbd350, Length=0x00029f1e, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x110, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc920, Buffer=0x28e7bfe726d, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x110) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cdc3c0 [0x0000028e7c190000], ZeroBits=0, pSize=0xaaa6cdc3c8 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\collections\__init__.cp314-win_amd64.pyd", IoStatusBlock=0xaaa6cdb050, FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\collections\__init__.pyd", IoStatusBlock=0xaaa6cdb050, FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\collections\__init__.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\collections\__init__.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdaaa8 [0x110], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\collections\__pycache__\__init__.cpython-314.pyc", IoStatusBlock=0xaaa6cdaae0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdac20 [0/8], FsInformation=0xaaa6cdac10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdaca0 [0/8], FsInformation=0xaaa6cdac90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdabd0 [0/0x12], FsInformation=0xaaa6cdabe0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdabd0, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdaca0 [0/0x28], FileInformation=0xaaa6cdadb8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdaca0 [0/0x18], FileInformation=0xaaa6cdada0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdab10 [0/8], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdab10 [0/0], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdb0d0 [0/8], FileInformation=0xaaa6cdb0c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdb0d0 [0/0], FileInformation=0xaaa6cdb0c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x110, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0 [0/0x00012480], Buffer=0x28e7bfbd350, Length=0x00012481, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x110, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0, Buffer=0x28e7bfcf7d0, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x110) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\keyword.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\keyword.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cd9268 [0x190], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\keyword.cpython-314.pyc", IoStatusBlock=0xaaa6cd92a0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd93e0 [0/8], FsInformation=0xaaa6cd93d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd9460 [0/8], FsInformation=0xaaa6cd9450, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd9390 [0/0x12], FsInformation=0xaaa6cd93a0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd9390, FileInformation=0xaaa6cd93c0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd9460 [0/0x28], FileInformation=0xaaa6cd9578, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd9460 [0/0x18], FileInformation=0xaaa6cd9560, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd92d0 [0/8], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x190, IoStatusBlock=0xaaa6cd92d0 [0/0], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x190, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0 [0/0x606], Buffer=0x28e7bfbfd50, Length=0x607, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x190, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0, Buffer=0x28e7bfc0356, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x190) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\operator.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\operator.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cd9268 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\operator.cpython-314.pyc", IoStatusBlock=0xaaa6cd92a0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd93e0 [0/8], FsInformation=0xaaa6cd93d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd9460 [0/8], FsInformation=0xaaa6cd9450, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd9390 [0/0x12], FsInformation=0xaaa6cd93a0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd9390, FileInformation=0xaaa6cd93c0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd9460 [0/0x28], FileInformation=0xaaa6cd9578, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd9460 [0/0x18], FileInformation=0xaaa6cd9560, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd92d0 [0/8], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cd92d0 [0/0], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0 [0/0x4a3f], Buffer=0x28e7bfc0580, Length=0x4a40, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0, Buffer=0x28e7bfc4fbf, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\reprlib.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\reprlib.py", IoStatusBlock=0xaaa6cd9810 [0/0x68], FileInformation=0xaaa6cd9980, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cd9268 [0x184], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\reprlib.cpython-314.pyc", IoStatusBlock=0xaaa6cd92a0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd93e0 [0/8], FsInformation=0xaaa6cd93d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd9460 [0/8], FsInformation=0xaaa6cd9450, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd9390 [0/0x12], FsInformation=0xaaa6cd93a0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd9390, FileInformation=0xaaa6cd93c0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd9460 [0/0x28], FileInformation=0xaaa6cd9578, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd9460 [0/0x18], FileInformation=0xaaa6cd9560, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd92d0 [0/8], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x184, IoStatusBlock=0xaaa6cd92d0 [0/0], FileInformation=0xaaa6cd92c0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0 [0/0x2dab], Buffer=0x28e7bfc5790, Length=0x2dac, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x184, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cd98a0, Buffer=0x28e7bfc853b, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x184) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\copyreg.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\copyreg.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdaaa8 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\copyreg.cpython-314.pyc", IoStatusBlock=0xaaa6cdaae0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdac20 [0/8], FsInformation=0xaaa6cdac10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/8], FsInformation=0xaaa6cdac90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdabd0 [0/0x12], FsInformation=0xaaa6cdabe0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdabd0, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/0x28], FileInformation=0xaaa6cdadb8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/0x18], FileInformation=0xaaa6cdada0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdab10 [0/8], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdab10 [0/0], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0 [0/0x1ef7], Buffer=0x28e7bfcde80, Length=0x1ef8, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0, Buffer=0x28e7bfcfd77, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\functools.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\functools.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdaaa8 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\functools.cpython-314.pyc", IoStatusBlock=0xaaa6cdaae0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdac20 [0/8], FsInformation=0xaaa6cdac10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/8], FsInformation=0xaaa6cdac90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdabd0 [0/0x12], FsInformation=0xaaa6cdabe0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdabd0, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/0x28], FileInformation=0xaaa6cdadb8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdaca0 [0/0x18], FileInformation=0xaaa6cdada0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdab10 [0/8], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0xaaa6cdab10 [0/0], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0 [0/0xbb95], Buffer=0x28e7bfcde80, Length=0xbb96, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0, Buffer=0x28e7bfd9a15, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x1a0) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\_win32sysloader.pyd", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", Attributes=0xaaa6cdbce0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdbd28 [0x1a0], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", IoStatusBlock=0xaaa6cdbd90 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdbd30 [0x190], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x1a0) => 0
Loaded DLL at 0000028E7BB10000 C:\Program Files\Python314\python3.DLL
NtMapViewOfSection(SectionHandle=0x190, ProcessHandle=-1, BaseAddress=0x28e7bfe81c0 [0x0000028e7bb10000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bd9cab8 [0x00010000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtOpenKey(KeyHandle=0xaaa6cdaa28 [0x184], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide") => 0
NtQueryValueKey(KeyHandle=0x184, ValueName="PreferExternalManifest", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdaa70, Length=0x14, ResultLength=0xaaa6cdaa20) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x184) => 0
NtOpenFile(FileHandle=0xaaa6cdabb8 [0x110], DesiredAccess=FILE_GENERIC_READ, ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", IoStatusBlock=0xaaa6cdac50 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtQueryVolumeInformationFile(FileHandle=0x110, IoStatusBlock=0xaaa6cdab00 [0/8], FsInformation=0xaaa6cdaaf0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtClose(Handle=0x110) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdc6a0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdc6c0, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\_win32sysloader.pyd", Attributes=0xaaa6cdc140 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdc188 [0x110], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\_win32sysloader.pyd", IoStatusBlock=0xaaa6cdc1f0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdc190 [0xe4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x110) => 0
Loaded DLL at 00007FF9B5BA0000 C:\Program Files\Python314\Lib\site-packages\win32\_win32sysloader.pyd
NtMapViewOfSection(SectionHandle=0xe4, ProcessHandle=-1, BaseAddress=0x28e7be1fc00 [0x00007ff9b5ba0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7be5ad58 [0x9000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdc6a0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdc6c0, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\pywintypes314.dll", IoStatusBlock=0xaaa6cdd510, FileInformation=0xaaa6cdd6a0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywintypes314.dll", IoStatusBlock=0xaaa6cdd510, FileInformation=0xaaa6cdd6a0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.cp314-win_amd64.pyd", IoStatusBlock=0xaaa6cdcab0, FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyd", IoStatusBlock=0xaaa6cdcab0, FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.py", IoStatusBlock=0xaaa6cdcab0, FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyw", IoStatusBlock=0xaaa6cdcab0, FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyc", IoStatusBlock=0xaaa6cdcab0, FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0xaaa6cdcab0 [0/0x68], FileInformation=0xaaa6cdcc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll", IoStatusBlock=0xaaa6cdd510 [0/0x68], FileInformation=0xaaa6cdd6a0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdd360, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdd380, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll", Attributes=0xaaa6cdce00 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdce48 [0x110], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll", IoStatusBlock=0xaaa6cdceb0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdce50 [0x1a0], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x110) => 0
Loaded DLL at 00007FF984990000 C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll
NtMapViewOfSection(SectionHandle=0x1a0, ProcessHandle=-1, BaseAddress=0x28e7bdda160 [0x00007ff984990000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7be575f8 [0x00026000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0CF0000 C:\WINDOWS\System32\USER32.dll
NtMapViewOfSection(SectionHandle=0xc4, ProcessHandle=-1, BaseAddress=0x28e7bdd4310 [0x00007ff9c0cf0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bfdc8e8 [0x0027c000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF2A0000 C:\WINDOWS\System32\win32u.dll
NtMapViewOfSection(SectionHandle=0x190, ProcessHandle=-1, BaseAddress=0x28e72c1d900 [0x00007ff9bf2a0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bff1c18 [0x00061000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C05D0000 C:\WINDOWS\System32\GDI32.dll
NtMapViewOfSection(SectionHandle=0x190, ProcessHandle=-1, BaseAddress=0x28e7be5ace0 [0x00007ff9c05d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b6c668 [0x00065000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF310000 C:\WINDOWS\System32\gdi32full.dll
NtMapViewOfSection(SectionHandle=0x184, ProcessHandle=-1, BaseAddress=0x28e7be28530 [0x00007ff9bf310000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bfef818 [0x001e3000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF030000 C:\WINDOWS\System32\msvcp_win.dll
NtMapViewOfSection(SectionHandle=0x18c, ProcessHandle=-1, BaseAddress=0x28e7bda98f0 [0x00007ff9bf030000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bfeb4d8 [0x00159000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF680000 C:\WINDOWS\System32\ole32.dll
NtMapViewOfSection(SectionHandle=0xc4, ProcessHandle=-1, BaseAddress=0x28e72c11b60 [0x00007ff9bf680000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7be215c8 [0x002b0000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0650000 C:\WINDOWS\System32\combase.dll
NtMapViewOfSection(SectionHandle=0x190, ProcessHandle=-1, BaseAddress=0x28e7bd99800 [0x00007ff9c0650000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7be5fc58 [0x00699000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1720000 C:\WINDOWS\System32\OLEAUT32.dll
NtMapViewOfSection(SectionHandle=0xc4, ProcessHandle=-1, BaseAddress=0x28e7bfecb30 [0x00007ff9c1720000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72c3d548 [0x001a6000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\VCRUNTIME140_1.dll", Attributes=0xaaa6cdcb90) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140_1.dll", Attributes=0xaaa6cdcb90 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdccc8 [0x190], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140_1.dll", IoStatusBlock=0xaaa6cdcd30 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdccd0 [0xe4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x190) => 0
Loaded DLL at 00007FF9B1350000 C:\Program Files\Python314\VCRUNTIME140_1.dll
NtMapViewOfSection(SectionHandle=0xe4, ProcessHandle=-1, BaseAddress=0x28e7be4bdc0 [0x00007ff9b1350000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7be22388 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x34 [ProcessMitigationPolicy], ProcessInformation=0xaaa6cdcc88, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0xaaa6cdca00, Length=0x40, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x34 [ProcessMitigationPolicy], ProcessInformation=0xaaa6cdc738, Length=8, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0xaaa6cdc6b8, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdc468, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdc468, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdc478, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xaaa6cdc478, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0xaaa6cdc020, Length=0x30, ReturnLength=null) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6869010, Buffer=0xaaa6cdc000, BufferSize=8, BytesRead=0xaaa6cdc018 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6869018, Buffer=0xaaa6cdc010, BufferSize=8, BytesRead=0xaaa6cdc018 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff9c3624d20, Buffer=0xaaa6cdc008, BufferSize=8, BytesRead=0xaaa6cdc018 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x28e72b4aa70, Buffer=0xaaa6cdc078, BufferSize=0x88, BytesRead=0xaaa6cdc018 [0x88]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x28e72b4a466, Buffer=0xaaa6cdc140, BufferSize=0x16, BytesRead=0xaaa6cdc070 [0x16]) => 0
NtOpenKey(KeyHandle=0xaaa6cdc478 [0x110], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize") => 0
NtQueryValueKey(KeyHandle=0x110, ValueName="DisableMetaFiles", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdc4c0, Length=0x14, ResultLength=0xaaa6cdc470) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x110) => 0
NtQuerySystemInformation(SystemInformationClass=0x67 [SystemCodeIntegrityInformation], SystemInformation=0xaaa6cdc2a8, Length=8, ReturnLength=null) => 0
NtCreateMutant(MutantHandle=0xaaa6cdc6a8 [0xe8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02", InitialOwner=false) => 0x40000000 [698 '{Object Exists}

An attempt was made to create an object and the object name already existed.']
NtWaitForSingleObject(Handle=0xe8, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0xaaa6cdc448 [0x170], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0") => 0
NtWaitForSingleObject(Handle=0x170, Alertable=false, Timeout=0xaaa6cdc3f8 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x170, Count=1, PreviousCount=0xaaa6cdc480 [0x1cad353f]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x170, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtOpenSemaphore(SemaphoreHandle=0xaaa6cdc448 [0x1a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0h") => 0
NtWaitForSingleObject(Handle=0x1a4, Alertable=false, Timeout=0xaaa6cdc3f8 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x1a4, Count=1, PreviousCount=0xaaa6cdc480 [0x146]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x1a4, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtClose(Handle=0x1a4) => 0
NtClose(Handle=0x170) => 0
NtReleaseMutant(MutantHandle=0xe8, PreviousCount=null) => 0
NtClose(Handle=0xe8) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc880, Length=4, ResultLength=0xaaa6cdc884 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc8f8 [0xe8], DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0xe8, ValueName="PageAllocatorUseSystemHeap", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdc960, Length=0x14, ResultLength=0xaaa6cdc920) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe8) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc880, Length=4, ResultLength=0xaaa6cdc884 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc8f8 [0x1a4], DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x1a4, ValueName="PageAllocatorSystemHeapIsPrivate", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdc960, Length=0x14, ResultLength=0xaaa6cdc920) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x1a4) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc8c0, Length=4, ResultLength=0xaaa6cdc8c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc938 [0x170], DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x170, ValueName="AggressiveMTATesting", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xaaa6cdc9a0, Length=0x10, ResultLength=0xaaa6cdc960) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x170) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x14 [TokenElevation], TokenInformation=0xaaa6cdc9f0, Length=4, ReturnLength=0xaaa6cdc9f4 [4]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x12 [TokenElevationType], TokenInformation=0xaaa6cdca24, Length=4, ReturnLength=0xaaa6cdc9f0 [4]) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc7d0, Length=4, ResultLength=0xaaa6cdc7d4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc848 [0x1a4], DesiredAccess=READ_CONTROL|0x119, ObjectAttributes=0x16c:"", OpenOptions=0) => 0
NtSetInformationKey(KeyHandle=0x1a4, KeySetInformationClass=5 [KeySetHandleTagsInformation], KeyInformation=0xaaa6cdc844, Length=4) => 0
NtQueryKey(KeyHandle=0x1a4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc780, Length=4, ResultLength=0xaaa6cdc784 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc7f8, DesiredAccess=KEY_READ, ObjectAttributes=0x1a4:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1a4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6b0, Length=4, ResultLength=0xaaa6cdc6b4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc728, DesiredAccess=KEY_READ, ObjectAttributes=0x1a4:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1a4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6b0, Length=4, ResultLength=0xaaa6cdc6b4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc728 [0x170], DesiredAccess=KEY_READ, ObjectAttributes=0x1a4:"Software\Microsoft\Ole", OpenOptions=0) => 0
NtCreateEvent(EventHandle=0xaaa6cdc928 [0xe8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x170, Event=0xe8, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec112f0 [0/0], CompletionFilter=0x10000001, WatchTree=false, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtOpenThreadToken(ThreadHandle=-2, DesiredAccess=0x4, OpenAsSelf=true, TokenHandle=0xaaa6cdca30) => 0xc000007c [1008 'An attempt was made to reference a token that does not exist.']
NtQueryKey(KeyHandle=0x1ac, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc770, Length=4, ResultLength=0xaaa6cdc774 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc7e8 [0x1b0], DesiredAccess=READ_CONTROL|0x119, ObjectAttributes=0x1ac:"Software\Classes\Local Settings", OpenOptions=0) => 0
NtSetInformationKey(KeyHandle=0x1b0, KeySetInformationClass=5 [KeySetHandleTagsInformation], KeyInformation=0xaaa6cdc7e4, Length=4) => 0
NtClose(Handle=0x1ac) => 0
NtQueryKey(KeyHandle=0x1b0, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc790, Length=4, ResultLength=0xaaa6cdc794 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc808, DesiredAccess=KEY_READ, ObjectAttributes=0x1b0:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1b0, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6c0, Length=4, ResultLength=0xaaa6cdc6c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc738, DesiredAccess=KEY_READ, ObjectAttributes=0x1b0:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1b0, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6c0, Length=4, ResultLength=0xaaa6cdc6c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc738, DesiredAccess=KEY_READ, ObjectAttributes=0x1b0:"Software\Microsoft\Ole", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1b0, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6c0, Length=4, ResultLength=0xaaa6cdc6c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc738 [0x1ac], DesiredAccess=KEY_READ, ObjectAttributes=0x1b0:"Software\Microsoft", OpenOptions=0) => 0
NtCreateEvent(EventHandle=0xaaa6cdc938 [0x1b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x1ac, Event=0x1b4, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec112f0 [0/0], CompletionFilter=0x10000001, WatchTree=true, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc6f0, Length=4, ResultLength=0xaaa6cdc6f4 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc768, DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"Software\Microsoft\OLE\Tracing", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1c8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1cc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1d0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1d4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1e4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0xaaa6cdcac8 [0x1e8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtOpenEvent(EventHandle=0xaaa6cdcb18, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0x9c:"HookSwitchHookEnabledEvent") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateMutant(MutantHandle=0xaaa6cdc6e8 [0x214], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02", InitialOwner=false) => 0x40000000 [698 '{Object Exists}

An attempt was made to create an object and the object name already existed.']
NtWaitForSingleObject(Handle=0x214, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0xaaa6cdc488 [0x218], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0") => 0
NtWaitForSingleObject(Handle=0x218, Alertable=false, Timeout=0xaaa6cdc438 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x218, Count=1, PreviousCount=0xaaa6cdc4c0 [0x1cad353f]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x218, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtOpenSemaphore(SemaphoreHandle=0xaaa6cdc488 [0x21c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x9c:"Local\SM0:10468:304:WilStaging_02_p0h") => 0
NtWaitForSingleObject(Handle=0x21c, Alertable=false, Timeout=0xaaa6cdc438 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x21c, Count=1, PreviousCount=0xaaa6cdc4c0 [0x146]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x21c, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtClose(Handle=0x21c) => 0
NtClose(Handle=0x218) => 0
NtReleaseMutant(MutantHandle=0x214, PreviousCount=null) => 0
NtClose(Handle=0x214) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc520, Length=4, ResultLength=0xaaa6cdc524 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc598, DesiredAccess=KEY_READ, ObjectAttributes=0x16c:"Software\Microsoft\OLE\Tracing", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0xaaa6cdc900, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0xaaa6cdc8f0, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0xaaa6cdc880, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0xaaa6cdc900, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0xaaa6cdc8f0, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0xaaa6cdc880, Length=0x40, ReturnLength=null) => 0
NtQueryKey(KeyHandle=0x16c, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0xaaa6cdc920, Length=4, ResultLength=0xaaa6cdc924 [4]) => 0
NtOpenKeyEx(KeyHandle=0xaaa6cdc998, DesiredAccess=0x1, ObjectAttributes=0x16c:"SOFTWARE\Microsoft\OLEAUT", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdd360, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cdd380, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdc2e0 [0/0x68], FileInformation=0xaaa6cdc450, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdc2e0 [0/0x68], FileInformation=0xaaa6cdc450, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdc2e0 [0/0x68], FileInformation=0xaaa6cdc450, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\datetime.py", IoStatusBlock=0xaaa6cdc2e0 [0/0x68], FileInformation=0xaaa6cdc450, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\datetime.py", IoStatusBlock=0xaaa6cdc2e0 [0/0x68], FileInformation=0xaaa6cdc450, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdbd38 [0x224], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\datetime.cpython-314.pyc", IoStatusBlock=0xaaa6cdbd70 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbeb0 [0/8], FsInformation=0xaaa6cdbea0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbf30 [0/8], FsInformation=0xaaa6cdbf20, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbe60 [0/0x12], FsInformation=0xaaa6cdbe70, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbe60, FileInformation=0xaaa6cdbe90, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbf30 [0/0x28], FileInformation=0xaaa6cdc048, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbf30 [0/0x18], FileInformation=0xaaa6cdc030, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbda0 [0/8], FileInformation=0xaaa6cdbd90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdbda0 [0/0], FileInformation=0xaaa6cdbd90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x224, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc370 [0/0x1fd], Buffer=0x28e7bff1f10, Length=0x1fe, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x224, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc370, Buffer=0x28e7bff210d, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x224) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddee0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddf00, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", Attributes=0xaaa6cdd980 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdd9c8 [0x228], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", IoStatusBlock=0xaaa6cdda30 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdd9d0 [0x22c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x228) => 0
Loaded DLL at 00007FF983550000 C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd
NtMapViewOfSection(SectionHandle=0x22c, ProcessHandle=-1, BaseAddress=0x28e7be57580 [0x00007ff983550000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bdab688 [0x00027000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\MSWSOCK.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\MSWSOCK.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\MSWSOCK.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\MSWSOCK.dll", Attributes=0xaaa6cdd710 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdd848 [0x228], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\MSWSOCK.dll", IoStatusBlock=0xaaa6cdd8b0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdd850 [0x22c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x228) => 0
Loaded DLL at 00007FF9BCC70000 C:\WINDOWS\SYSTEM32\MSWSOCK.dll
NtMapViewOfSection(SectionHandle=0x22c, ProcessHandle=-1, BaseAddress=0x28e7bda8f20 [0x00007ff9bcc70000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b6c668 [0x000c3000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\sfc.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\sfc.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\sfc.dll", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc.dll", Attributes=0xaaa6cdd710 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdd848 [0x240], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc.dll", IoStatusBlock=0xaaa6cdd8b0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdd850 [0x244], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x240) => 0
Loaded DLL at 00007FF9B5CD0000 C:\WINDOWS\SYSTEM32\sfc.dll
NtMapViewOfSection(SectionHandle=0x244, ProcessHandle=-1, BaseAddress=0x28e7be6e690 [0x00007ff9b5cd0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bfdc8e8 [0x9000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\sfc_os.DLL", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\sfc_os.DLL", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\sfc_os.DLL", Attributes=0xaaa6cdd710) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc_os.DLL", Attributes=0xaaa6cdd710 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdd848 [0x238], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc_os.DLL", IoStatusBlock=0xaaa6cdd8b0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdd850 [0x228], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x238) => 0
Loaded DLL at 00007FF9B5CB0000 C:\WINDOWS\SYSTEM32\sfc_os.DLL
NtMapViewOfSection(SectionHandle=0x228, ProcessHandle=-1, BaseAddress=0x28e7be59f60 [0x00007ff9b5cb0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bfef818 [0x00013000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddee0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddf00, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddee0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddf00, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", Attributes=0xaaa6cdd980 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdd9c8 [0x234], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", IoStatusBlock=0xaaa6cdda30 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdd9d0 [0x23c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x234) => 0
Loaded DLL at 00007FF9A61F0000 C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd
NtMapViewOfSection(SectionHandle=0x23c, ProcessHandle=-1, BaseAddress=0x28e7bdab610 [0x00007ff9a61f0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e7bff2058 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddee0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0xaaa6cddf00, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\win32con.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\win32con.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cddb28 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\win32con.cpython-314.pyc", IoStatusBlock=0xaaa6cddb60 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddca0 [0/8], FsInformation=0xaaa6cddc90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddd20 [0/8], FsInformation=0xaaa6cddd10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddc50 [0/0x12], FsInformation=0xaaa6cddc60, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddc50, FileInformation=0xaaa6cddc80, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddd20 [0/0x28], FileInformation=0xaaa6cdde38, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddd20 [0/0x18], FileInformation=0xaaa6cdde20, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddb90 [0/8], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cddb90 [0/0], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cde150 [0/8], FileInformation=0xaaa6cde140, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cde150 [0/0], FileInformation=0xaaa6cde140, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x244, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160 [0/0x00023cdc], Buffer=0x28e7c01d000, Length=0x00023cdd, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x244, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160, Buffer=0x28e7c040cdc, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x244) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\winerror.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\winerror.py", IoStatusBlock=0xaaa6cde0d0 [0/0x68], FileInformation=0xaaa6cde240, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cddb28 [0x248], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\winerror.cpython-314.pyc", IoStatusBlock=0xaaa6cddb60 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddca0 [0/8], FsInformation=0xaaa6cddc90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddd20 [0/8], FsInformation=0xaaa6cddd10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddc50 [0/0x12], FsInformation=0xaaa6cddc60, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddc50, FileInformation=0xaaa6cddc80, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddd20 [0/0x28], FileInformation=0xaaa6cdde38, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddd20 [0/0x18], FileInformation=0xaaa6cdde20, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddb90 [0/8], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cddb90 [0/0], FileInformation=0xaaa6cddb80, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cde150 [0/8], FileInformation=0xaaa6cde140, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cde150 [0/0], FileInformation=0xaaa6cde140, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x248, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160 [0/0x00054ee4], Buffer=0x28e7c093850, Length=0x00054ee5, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x248, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cde160, Buffer=0x28e7c0e8734, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x248) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cddd80 [0x0000028e7c940000], ZeroBits=0, pSize=0xaaa6cddd88 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\warnings.py", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\warnings.py", IoStatusBlock=0xaaa6cdc890 [0/0x68], FileInformation=0xaaa6cdca00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdc2e8 [0x24c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\warnings.cpython-314.pyc", IoStatusBlock=0xaaa6cdc320 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc460 [0/8], FsInformation=0xaaa6cdc450, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc4e0 [0/8], FsInformation=0xaaa6cdc4d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc410 [0/0x12], FsInformation=0xaaa6cdc420, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc410, FileInformation=0xaaa6cdc440, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc4e0 [0/0x28], FileInformation=0xaaa6cdc5f8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc4e0 [0/0x18], FileInformation=0xaaa6cdc5e0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc350 [0/8], FileInformation=0xaaa6cdc340, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x24c, IoStatusBlock=0xaaa6cdc350 [0/0], FileInformation=0xaaa6cdc340, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x24c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc920 [0/0x9cb], Buffer=0x28e7c150440, Length=0x9cc, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x24c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdc920, Buffer=0x28e7c150e0b, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x24c) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\_py_warnings.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\_py_warnings.py", IoStatusBlock=0xaaa6cdb050 [0/0x68], FileInformation=0xaaa6cdb1c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0xaaa6cdaaa8 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\_py_warnings.cpython-314.pyc", IoStatusBlock=0xaaa6cdaae0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdac20 [0/8], FsInformation=0xaaa6cdac10, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdaca0 [0/8], FsInformation=0xaaa6cdac90, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdabd0 [0/0x12], FsInformation=0xaaa6cdabe0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdabd0, FileInformation=0xaaa6cdac00, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdaca0 [0/0x28], FileInformation=0xaaa6cdadb8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdaca0 [0/0x18], FileInformation=0xaaa6cdada0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdab10 [0/8], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x244, IoStatusBlock=0xaaa6cdab10 [0/0], FileInformation=0xaaa6cdab00, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x244, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0 [0/0x907f], Buffer=0x28e7bffcfd0, Length=0x9080, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x244, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdb0e0, Buffer=0x28e7c00604f, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x244) => 0
NtCreateIoCompletion(IoHandle=0xaaa6cdef70 [0x24c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, NumberOfConcurrentThreads=0) => 0
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x234], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-0", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x250], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-0", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x234, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x234, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x234, Event=0, ApcRoutine=null, ApcContext=0x28e7bfef858, IoStatusBlock=0x28e7bfef858, Buffer=0x28e7bf2dc50, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x23c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-1", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-1", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x23c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x23c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x23c, Event=0, ApcRoutine=null, ApcContext=0x28e7be42178, IoStatusBlock=0x28e7be42178, Buffer=0x28e7c9eba00, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x260], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-2", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x264], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-2", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x260, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x260, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x260, Event=0, ApcRoutine=null, ApcContext=0x28e7be22348, IoStatusBlock=0x28e7be22348, Buffer=0x28e7c9eba50, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x248], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-3", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x268], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-3", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x248, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x248, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x248, Event=0, ApcRoutine=null, ApcContext=0x28e7bfba588, IoStatusBlock=0x28e7bfba588, Buffer=0x28e7c9ebaa0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x224], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-4", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x240], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-4", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x224, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x224, Event=0, ApcRoutine=null, ApcContext=0x28e7bfc1ad8, IoStatusBlock=0x28e7bfc1ad8, Buffer=0x28e7c9ebaf0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x26c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-5", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x270], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-5", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x26c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x26c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x26c, Event=0, ApcRoutine=null, ApcContext=0x28e7bff1fc8, IoStatusBlock=0x28e7bff1fc8, Buffer=0x28e7c9ebb40, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x278], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-6", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x27c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-6", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x278, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x278, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x278, Event=0, ApcRoutine=null, ApcContext=0x28e7bff2098, IoStatusBlock=0x28e7bff2098, Buffer=0x28e7c9ebb90, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x284], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-7", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x288], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-7", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x284, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x284, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x284, Event=0, ApcRoutine=null, ApcContext=0x28e7be42b38, IoStatusBlock=0x28e7be42b38, Buffer=0x28e7c9ebbe0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x28c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-8", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x290], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-8", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x28c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x28c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x28c, Event=0, ApcRoutine=null, ApcContext=0x28e7be6de48, IoStatusBlock=0x28e7be6de48, Buffer=0x28e7c9ebc30, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x294], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-9", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x298], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-9", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x294, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x294, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x294, Event=0, ApcRoutine=null, ApcContext=0x28e7be6df68, IoStatusBlock=0x28e7be6df68, Buffer=0x28e7c9ebc80, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x29c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-10", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-10", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x29c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x29c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x29c, Event=0, ApcRoutine=null, ApcContext=0x28e7bfbab98, IoStatusBlock=0x28e7bfbab98, Buffer=0x28e7c9ebcd0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-11", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-11", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2a4, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2a4, Event=0, ApcRoutine=null, ApcContext=0x28e7bfbacb8, IoStatusBlock=0x28e7bfbacb8, Buffer=0x28e7c9ebd20, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-12", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-12", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2ac, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2ac, Event=0, ApcRoutine=null, ApcContext=0x28e7bfb96e8, IoStatusBlock=0x28e7bfb96e8, Buffer=0x28e7c9ebd70, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-13", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-13", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x228, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x228, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=0x28e7bfb9808, IoStatusBlock=0x28e7bfb9808, Buffer=0x28e7c9ebdc0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2b8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-14", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2bc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-14", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2b8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2b8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2b8, Event=0, ApcRoutine=null, ApcContext=0x28e7bfc0b38, IoStatusBlock=0x28e7bfc0b38, Buffer=0x28e7c9ebe10, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2c0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-15", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2c4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-15", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2c0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2c0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2c0, Event=0, ApcRoutine=null, ApcContext=0x28e7bfc0c58, IoStatusBlock=0x28e7bfc0c58, Buffer=0x28e7c9ebe60, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-16", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-16", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2c8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2c8, Event=0, ApcRoutine=null, ApcContext=0x28e7bfc0d78, IoStatusBlock=0x28e7bfc0d78, Buffer=0x28e7c9ebeb0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-17", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-17", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2d0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2d0, Event=0, ApcRoutine=null, ApcContext=0x28e7bf9bd38, IoStatusBlock=0x28e7bf9bd38, Buffer=0x28e7c9ebf00, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2d8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-18", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2dc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-18", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2d8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2d8, Event=0, ApcRoutine=null, ApcContext=0x28e7bf9be58, IoStatusBlock=0x28e7bf9be58, Buffer=0x28e7c9ebf50, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2e0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-19", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-19", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2e0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2e0, Event=0, ApcRoutine=null, ApcContext=0x28e7c009218, IoStatusBlock=0x28e7c009218, Buffer=0x28e7c9ebfa0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2e8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-20", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2ec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-20", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2e8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2e8, Event=0, ApcRoutine=null, ApcContext=0x28e7c009338, IoStatusBlock=0x28e7c009338, Buffer=0x28e7c9f8030, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2f0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-21", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x22c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-21", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2f0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2f0, Event=0, ApcRoutine=null, ApcContext=0x28e7c009458, IoStatusBlock=0x28e7c009458, Buffer=0x28e7c9f8080, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x2f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-22", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-22", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2f4, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2f4, Event=0, ApcRoutine=null, ApcContext=0x28e7c009578, IoStatusBlock=0x28e7c009578, Buffer=0x28e7c9f80d0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x230], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-23", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x2fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-23", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x230, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x230, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x230, Event=0, ApcRoutine=null, ApcContext=0x28e7c009698, IoStatusBlock=0x28e7c009698, Buffer=0x28e7c9f8120, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x300], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-24", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x304], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-24", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x300, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x300, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x300, Event=0, ApcRoutine=null, ApcContext=0x28e7c0097b8, IoStatusBlock=0x28e7c0097b8, Buffer=0x28e7c9f8170, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x308], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-25", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x30c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-25", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x308, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x308, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x308, Event=0, ApcRoutine=null, ApcContext=0x28e7c0098d8, IoStatusBlock=0x28e7c0098d8, Buffer=0x28e7c9f81c0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x310], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-26", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x314], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-26", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x310, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x310, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x310, Event=0, ApcRoutine=null, ApcContext=0x28e7c0099f8, IoStatusBlock=0x28e7c0099f8, Buffer=0x28e7c9f8210, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x318], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-27", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x31c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-27", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x318, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x318, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x318, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd068, IoStatusBlock=0x28e7bffd068, Buffer=0x28e7c9f8260, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x320], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-28", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x324], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-28", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x320, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x320, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x320, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd188, IoStatusBlock=0x28e7bffd188, Buffer=0x28e7c9f82b0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x328], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-29", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x32c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-29", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x328, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x328, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x328, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd2a8, IoStatusBlock=0x28e7bffd2a8, Buffer=0x28e7c9f8300, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x330], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-30", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x334], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-30", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x330, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x330, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x330, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd3c8, IoStatusBlock=0x28e7bffd3c8, Buffer=0x28e7c9f8350, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x338], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-31", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x33c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-31", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x338, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x338, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x338, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd4e8, IoStatusBlock=0x28e7bffd4e8, Buffer=0x28e7c9f83a0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x344], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-32", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x348], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-32", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x344, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x344, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x344, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd608, IoStatusBlock=0x28e7bffd608, Buffer=0x28e7c9f83f0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x34c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-33", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x350], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-33", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x34c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x34c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x34c, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd728, IoStatusBlock=0x28e7bffd728, Buffer=0x28e7c9f8440, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x354], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-34", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x358], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-34", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x354, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x354, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x354, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd848, IoStatusBlock=0x28e7bffd848, Buffer=0x28e7c9f8490, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x35c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-35", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x360], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-35", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x35c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x35c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x35c, Event=0, ApcRoutine=null, ApcContext=0x28e7bffd968, IoStatusBlock=0x28e7bffd968, Buffer=0x28e7c9f84e0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x364], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-36", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x368], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-36", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x364, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x364, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x364, Event=0, ApcRoutine=null, ApcContext=0x28e7bffda88, IoStatusBlock=0x28e7bffda88, Buffer=0x28e7c9f8530, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x36c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-37", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x374], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-37", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x36c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x36c, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x36c, Event=0, ApcRoutine=null, ApcContext=0x28e7bffdba8, IoStatusBlock=0x28e7bffdba8, Buffer=0x28e7c9f8580, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x378], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-38", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x37c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-38", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x378, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x378, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x378, Event=0, ApcRoutine=null, ApcContext=0x28e7bffdcc8, IoStatusBlock=0x28e7bffdcc8, Buffer=0x28e7c9f85d0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x380], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-39", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x384], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-39", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x380, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x380, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x380, Event=0, ApcRoutine=null, ApcContext=0x28e7bffdde8, IoStatusBlock=0x28e7bffdde8, Buffer=0x28e7c9f8620, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x388], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-40", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x38c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-40", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x388, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x388, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x388, Event=0, ApcRoutine=null, ApcContext=0x28e7bffdf08, IoStatusBlock=0x28e7bffdf08, Buffer=0x28e7c9f8670, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x390], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-41", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x394], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-41", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x390, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x390, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x390, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe028, IoStatusBlock=0x28e7bffe028, Buffer=0x28e7c9f86c0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x398], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-42", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x39c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-42", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x398, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x398, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x398, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe148, IoStatusBlock=0x28e7bffe148, Buffer=0x28e7c9f8710, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-43", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3a4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-43", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3a0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3a0, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe268, IoStatusBlock=0x28e7bffe268, Buffer=0x28e7c9f8760, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3a8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-44", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3ac], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-44", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3a8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3a8, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe388, IoStatusBlock=0x28e7bffe388, Buffer=0x28e7c9f87b0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3b0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-45", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-45", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3b0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3b0, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe4a8, IoStatusBlock=0x28e7bffe4a8, Buffer=0x28e7c9f8800, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3b8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-46", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3bc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-46", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3b8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3b8, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe5c8, IoStatusBlock=0x28e7bffe5c8, Buffer=0x28e7c9f8850, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3c0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-47", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3c4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-47", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3c0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3c0, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe6e8, IoStatusBlock=0x28e7bffe6e8, Buffer=0x28e7c9f88a0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-48", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-48", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3c8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3c8, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe808, IoStatusBlock=0x28e7bffe808, Buffer=0x28e7c9f88f0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-49", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-49", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3d0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3d0, Event=0, ApcRoutine=null, ApcContext=0x28e7bffe928, IoStatusBlock=0x28e7bffe928, Buffer=0x28e7c9f8940, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3d8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-50", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3e0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-50", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3d8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3d8, Event=0, ApcRoutine=null, ApcContext=0x28e7bffea48, IoStatusBlock=0x28e7bffea48, Buffer=0x28e7c9f8990, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-51", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3e8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-51", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3e4, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3e4, Event=0, ApcRoutine=null, ApcContext=0x28e7bffeb68, IoStatusBlock=0x28e7bffeb68, Buffer=0x28e7c9f89e0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3ec], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-52", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3f0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-52", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3ec, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3ec, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3ec, Event=0, ApcRoutine=null, ApcContext=0x28e7bffec88, IoStatusBlock=0x28e7bffec88, Buffer=0x28e7c9f8a30, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-53", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x3f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-53", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3f4, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3f4, Event=0, ApcRoutine=null, ApcContext=0x28e7bffeda8, IoStatusBlock=0x28e7bffeda8, Buffer=0x28e7c9f8a80, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x3fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-54", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x404], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-54", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3fc, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3fc, Event=0, ApcRoutine=null, ApcContext=0x28e7bffeec8, IoStatusBlock=0x28e7bffeec8, Buffer=0x28e7c9f8ad0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x408], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-55", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x40c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-55", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x408, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x408, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x408, Event=0, ApcRoutine=null, ApcContext=0x28e7bffefe8, IoStatusBlock=0x28e7bffefe8, Buffer=0x28e7c9f8b20, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x410], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-56", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x414], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-56", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x410, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x410, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x410, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff108, IoStatusBlock=0x28e7bfff108, Buffer=0x28e7c9f8b70, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x418], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-57", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x41c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-57", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x418, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x418, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x418, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff228, IoStatusBlock=0x28e7bfff228, Buffer=0x28e7c9f8bc0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x420], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-58", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x424], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-58", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x420, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x420, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x420, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff348, IoStatusBlock=0x28e7bfff348, Buffer=0x28e7c9f8c10, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x428], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-59", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x42c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-59", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x428, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x428, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x428, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff468, IoStatusBlock=0x28e7bfff468, Buffer=0x28e7c9f8c60, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x430], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-60", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x434], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-60", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x430, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x430, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x430, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff588, IoStatusBlock=0x28e7bfff588, Buffer=0x28e7c9f8cb0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x438], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-61", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x43c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-61", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x438, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x438, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x438, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff6a8, IoStatusBlock=0x28e7bfff6a8, Buffer=0x28e7c9f8d00, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x440], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-62", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x444], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-62", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x440, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x440, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x440, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff7c8, IoStatusBlock=0x28e7bfff7c8, Buffer=0x28e7c9f8d50, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x448], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-63", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x44c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-63", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x448, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x448, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x448, Event=0, ApcRoutine=null, ApcContext=0x28e7bfff8e8, IoStatusBlock=0x28e7bfff8e8, Buffer=0x28e7c9f8da0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x450], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-64", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x454], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-64", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x450, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x450, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x450, Event=0, ApcRoutine=null, ApcContext=0x28e7bfffa08, IoStatusBlock=0x28e7bfffa08, Buffer=0x28e7c9f8df0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x458], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-65", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x45c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-65", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x458, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x458, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x458, Event=0, ApcRoutine=null, ApcContext=0x28e7c0002d8, IoStatusBlock=0x28e7c0002d8, Buffer=0x28e7c9f8e40, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x460], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-66", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x464], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-66", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x460, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x460, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x460, Event=0, ApcRoutine=null, ApcContext=0x28e7c0003f8, IoStatusBlock=0x28e7c0003f8, Buffer=0x28e7c9f8e90, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x468], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-67", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x46c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-67", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x468, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x468, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x468, Event=0, ApcRoutine=null, ApcContext=0x28e7c000518, IoStatusBlock=0x28e7c000518, Buffer=0x28e7c9f8ee0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x470], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-68", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x474], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-68", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x470, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x470, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x470, Event=0, ApcRoutine=null, ApcContext=0x28e7c000638, IoStatusBlock=0x28e7c000638, Buffer=0x28e7c9f8f30, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x478], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-69", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x47c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-69", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x478, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x478, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x478, Event=0, ApcRoutine=null, ApcContext=0x28e7c000758, IoStatusBlock=0x28e7c000758, Buffer=0x28e7c9f8f80, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x480], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-70", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x484], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-70", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x480, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x480, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x480, Event=0, ApcRoutine=null, ApcContext=0x28e7c000878, IoStatusBlock=0x28e7c000878, Buffer=0x28e7c9f8fd0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x488], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-71", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x48c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-71", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x488, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x488, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x488, Event=0, ApcRoutine=null, ApcContext=0x28e7c000998, IoStatusBlock=0x28e7c000998, Buffer=0x28e7c9f9020, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x490], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-72", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x494], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-72", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x490, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x490, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x490, Event=0, ApcRoutine=null, ApcContext=0x28e7c000ab8, IoStatusBlock=0x28e7c000ab8, Buffer=0x28e7c9f9070, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x498], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-73", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x49c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-73", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x498, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x498, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x498, Event=0, ApcRoutine=null, ApcContext=0x28e7c000bd8, IoStatusBlock=0x28e7c000bd8, Buffer=0x28e7c9f90c0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-74", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4a4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-74", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4a0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4a0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4a0, Event=0, ApcRoutine=null, ApcContext=0x28e7c000cf8, IoStatusBlock=0x28e7c000cf8, Buffer=0x28e7c9f9110, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4a8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-75", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4ac], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-75", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4a8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4a8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4a8, Event=0, ApcRoutine=null, ApcContext=0x28e7c000e18, IoStatusBlock=0x28e7c000e18, Buffer=0x28e7c9f9160, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4b0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-76", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-76", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4b0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4b0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4b0, Event=0, ApcRoutine=null, ApcContext=0x28e7c000f38, IoStatusBlock=0x28e7c000f38, Buffer=0x28e7c9f91b0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4b8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-77", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4bc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-77", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4b8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4b8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4b8, Event=0, ApcRoutine=null, ApcContext=0x28e7bfffe38, IoStatusBlock=0x28e7bfffe38, Buffer=0x28e7c9f9200, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4c0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-78", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4c4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-78", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4c0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4c0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4c0, Event=0, ApcRoutine=null, ApcContext=0x28e7bffff58, IoStatusBlock=0x28e7bffff58, Buffer=0x28e7c9f9250, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-79", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-79", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4c8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4c8, Event=0, ApcRoutine=null, ApcContext=0x28e7c000078, IoStatusBlock=0x28e7c000078, Buffer=0x28e7c9f92a0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-80", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-80", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4d0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4d0, Event=0, ApcRoutine=null, ApcContext=0x28e7c000198, IoStatusBlock=0x28e7c000198, Buffer=0x28e7c9f92f0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4d8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-81", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4dc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-81", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4d8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4d8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4d8, Event=0, ApcRoutine=null, ApcContext=0x28e7c001678, IoStatusBlock=0x28e7c001678, Buffer=0x28e7c9f9340, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4e0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-82", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-82", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4e0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4e0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4e0, Event=0, ApcRoutine=null, ApcContext=0x28e7c001798, IoStatusBlock=0x28e7c001798, Buffer=0x28e7c9f9390, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4e8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-83", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4ec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-83", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4e8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4e8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4e8, Event=0, ApcRoutine=null, ApcContext=0x28e7c0018b8, IoStatusBlock=0x28e7c0018b8, Buffer=0x28e7c9f93e0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4f0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-84", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4f4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-84", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4f0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4f0, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4f0, Event=0, ApcRoutine=null, ApcContext=0x28e7c0019d8, IoStatusBlock=0x28e7c0019d8, Buffer=0x28e7c9f9430, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x4f8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-85", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x4fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-85", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4f8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x4f8, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x4f8, Event=0, ApcRoutine=null, ApcContext=0x28e7c001af8, IoStatusBlock=0x28e7c001af8, Buffer=0x28e7c9f9480, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x500], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-86", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x504], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-86", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x500, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x500, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x500, Event=0, ApcRoutine=null, ApcContext=0x28e7c001c18, IoStatusBlock=0x28e7c001c18, Buffer=0x28e7c9f94d0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x508], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-87", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x50c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-87", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x508, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x508, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x508, Event=0, ApcRoutine=null, ApcContext=0x28e7c001d38, IoStatusBlock=0x28e7c001d38, Buffer=0x28e7c9f9520, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x510], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-88", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x514], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-88", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x510, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x510, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x510, Event=0, ApcRoutine=null, ApcContext=0x28e7c001e58, IoStatusBlock=0x28e7c001e58, Buffer=0x28e7c9f9570, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x518], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-89", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x51c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-89", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x518, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x518, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x518, Event=0, ApcRoutine=null, ApcContext=0x28e7c001f78, IoStatusBlock=0x28e7c001f78, Buffer=0x28e7c9f95c0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x520], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-90", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x524], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-90", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x520, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x520, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x520, Event=0, ApcRoutine=null, ApcContext=0x28e7c002098, IoStatusBlock=0x28e7c002098, Buffer=0x28e7c9f9610, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x528], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-91", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x52c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-91", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x528, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x528, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x528, Event=0, ApcRoutine=null, ApcContext=0x28e7c0021b8, IoStatusBlock=0x28e7c0021b8, Buffer=0x28e7c9f9660, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x530], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-92", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x534], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-92", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x530, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x530, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x530, Event=0, ApcRoutine=null, ApcContext=0x28e7c0022d8, IoStatusBlock=0x28e7c0022d8, Buffer=0x28e7c9f96b0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x538], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-93", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x53c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-93", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x538, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x538, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x538, Event=0, ApcRoutine=null, ApcContext=0x28e7c0013e8, IoStatusBlock=0x28e7c0013e8, Buffer=0x28e7c9f9700, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x540], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-94", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x544], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-94", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x540, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x540, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x540, Event=0, ApcRoutine=null, ApcContext=0x28e7c001508, IoStatusBlock=0x28e7c001508, Buffer=0x28e7c9f9750, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x548], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-95", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x54c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-95", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x548, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x548, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x548, Event=0, ApcRoutine=null, ApcContext=0x28e7bfffad8, IoStatusBlock=0x28e7bfffad8, Buffer=0x28e7c9f97a0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x550], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-96", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x554], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-96", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x550, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x550, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x550, Event=0, ApcRoutine=null, ApcContext=0x28e7bfffbf8, IoStatusBlock=0x28e7bfffbf8, Buffer=0x28e7c9f97f0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x558], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-97", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x55c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-97", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x558, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x558, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x558, Event=0, ApcRoutine=null, ApcContext=0x28e7bfffd18, IoStatusBlock=0x28e7bfffd18, Buffer=0x28e7c9f9840, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x560], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-98", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x564], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-98", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x560, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x560, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x560, Event=0, ApcRoutine=null, ApcContext=0x28e7c002b18, IoStatusBlock=0x28e7c002b18, Buffer=0x28e7c9f9890, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0xaaa6cdeeb0 [0x568], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-99", IoStatusBlock=0xaaa6cdef10 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xaaa6cdeec0 [-500000]) => 0
NtCreateFile(FileHandle=0xaaa6cdedd8 [0x56c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-99", IoStatusBlock=0xaaa6cdee10 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x568, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xaaa6cdefc0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x568, IoStatusBlock=0xaaa6cdef90 [0/0], FileInformation=0xaaa6cdef78, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x568, Event=0, ApcRoutine=null, ApcContext=0x28e7c002c38, IoStatusBlock=0x28e7c002c38, Buffer=0x28e7c9f98e0, Length=0x40, ByteOffset=0xaaa6cdef10 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtRemoveIoCompletion(IoHandle=0x24c, Key=0xaaa6cdf0a8 [0], Overlapped=0xaaa6cdef98, IoStatusBlock=0xaaa6cdefa0 [0/0], Timeout=0xaaa6cdef90 [-2e+07]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtCancelIoFile(FileHandle=0x234, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x23c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x260, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x248, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x224, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x26c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x278, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x284, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x28c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x294, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x29c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2a4, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2ac, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x228, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2b8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2c0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2c8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2d0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2d8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2e0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2e8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2f0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x2f4, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x230, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x300, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x308, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x310, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x318, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x320, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x328, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x330, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x338, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x344, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x34c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x354, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x35c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x364, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x36c, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x378, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x380, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x388, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x390, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x398, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3a0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3a8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3b0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3b8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3c0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3c8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3d0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3d8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3e4, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3ec, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3f4, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x3fc, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x408, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x410, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x418, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x420, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x428, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x430, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x438, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x440, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x448, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x450, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x458, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x460, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x468, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x470, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x478, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x480, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x488, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x490, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x498, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4a0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4a8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4b0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4b8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4c0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4c8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4d0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4d8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4e0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4e8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4f0, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x4f8, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x500, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x508, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x510, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x518, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x520, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x528, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x530, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x538, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x540, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x548, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x550, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x558, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x560, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtCancelIoFile(FileHandle=0x568, IoStatusBlock=0xaaa6cdeff0 [0/0]) => 0
NtClose(Handle=0x234) => 0
NtClose(Handle=0x23c) => 0
NtClose(Handle=0x260) => 0
NtClose(Handle=0x248) => 0
NtClose(Handle=0x224) => 0
NtClose(Handle=0x26c) => 0
NtClose(Handle=0x278) => 0
NtClose(Handle=0x284) => 0
NtClose(Handle=0x28c) => 0
NtClose(Handle=0x294) => 0
NtClose(Handle=0x29c) => 0
NtClose(Handle=0x2a4) => 0
NtClose(Handle=0x2ac) => 0
NtClose(Handle=0x228) => 0
NtClose(Handle=0x2b8) => 0
NtClose(Handle=0x2c0) => 0
NtClose(Handle=0x2c8) => 0
NtClose(Handle=0x2d0) => 0
NtClose(Handle=0x2d8) => 0
NtClose(Handle=0x2e0) => 0
NtClose(Handle=0x2e8) => 0
NtClose(Handle=0x2f0) => 0
NtClose(Handle=0x2f4) => 0
NtClose(Handle=0x230) => 0
NtClose(Handle=0x300) => 0
NtClose(Handle=0x308) => 0
NtClose(Handle=0x310) => 0
NtClose(Handle=0x318) => 0
NtClose(Handle=0x320) => 0
NtClose(Handle=0x328) => 0
NtClose(Handle=0x330) => 0
NtClose(Handle=0x338) => 0
NtClose(Handle=0x344) => 0
NtClose(Handle=0x34c) => 0
NtClose(Handle=0x354) => 0
NtClose(Handle=0x35c) => 0
NtClose(Handle=0x364) => 0
NtClose(Handle=0x36c) => 0
NtClose(Handle=0x378) => 0
NtClose(Handle=0x380) => 0
NtClose(Handle=0x388) => 0
NtClose(Handle=0x390) => 0
NtClose(Handle=0x398) => 0
NtClose(Handle=0x3a0) => 0
NtClose(Handle=0x3a8) => 0
NtClose(Handle=0x3b0) => 0
NtClose(Handle=0x3b8) => 0
NtClose(Handle=0x3c0) => 0
NtClose(Handle=0x3c8) => 0
NtClose(Handle=0x3d0) => 0
NtClose(Handle=0x3d8) => 0
NtClose(Handle=0x3e4) => 0
NtClose(Handle=0x3ec) => 0
NtClose(Handle=0x3f4) => 0
NtClose(Handle=0x3fc) => 0
NtClose(Handle=0x408) => 0
NtClose(Handle=0x410) => 0
NtClose(Handle=0x418) => 0
NtClose(Handle=0x420) => 0
NtClose(Handle=0x428) => 0
NtClose(Handle=0x430) => 0
NtClose(Handle=0x438) => 0
NtClose(Handle=0x440) => 0
NtClose(Handle=0x448) => 0
NtClose(Handle=0x450) => 0
NtClose(Handle=0x458) => 0
NtClose(Handle=0x460) => 0
NtClose(Handle=0x468) => 0
NtClose(Handle=0x470) => 0
NtClose(Handle=0x478) => 0
NtClose(Handle=0x480) => 0
NtClose(Handle=0x488) => 0
NtClose(Handle=0x490) => 0
NtClose(Handle=0x498) => 0
NtClose(Handle=0x4a0) => 0
NtClose(Handle=0x4a8) => 0
NtClose(Handle=0x4b0) => 0
NtClose(Handle=0x4b8) => 0
NtClose(Handle=0x4c0) => 0
NtClose(Handle=0x4c8) => 0
NtClose(Handle=0x4d0) => 0
NtClose(Handle=0x4d8) => 0
NtClose(Handle=0x4e0) => 0
NtClose(Handle=0x4e8) => 0
NtClose(Handle=0x4f0) => 0
NtClose(Handle=0x4f8) => 0
NtClose(Handle=0x500) => 0
NtClose(Handle=0x508) => 0
NtClose(Handle=0x510) => 0
NtClose(Handle=0x518) => 0
NtClose(Handle=0x520) => 0
NtClose(Handle=0x528) => 0
NtClose(Handle=0x530) => 0
NtClose(Handle=0x538) => 0
NtClose(Handle=0x540) => 0
NtClose(Handle=0x548) => 0
NtClose(Handle=0x550) => 0
NtClose(Handle=0x558) => 0
NtClose(Handle=0x560) => 0
NtClose(Handle=0x568) => 0
NtClose(Handle=0x250) => 0
NtClose(Handle=0x244) => 0
NtClose(Handle=0x264) => 0
NtClose(Handle=0x268) => 0
NtClose(Handle=0x240) => 0
NtClose(Handle=0x270) => 0
NtClose(Handle=0x27c) => 0
NtClose(Handle=0x288) => 0
NtClose(Handle=0x290) => 0
NtClose(Handle=0x298) => 0
NtClose(Handle=0x2a0) => 0
NtClose(Handle=0x2a8) => 0
NtClose(Handle=0x2b0) => 0
NtClose(Handle=0x2b4) => 0
NtClose(Handle=0x2bc) => 0
NtClose(Handle=0x2c4) => 0
NtClose(Handle=0x2cc) => 0
NtClose(Handle=0x2d4) => 0
NtClose(Handle=0x2dc) => 0
NtClose(Handle=0x2e4) => 0
NtClose(Handle=0x2ec) => 0
NtClose(Handle=0x22c) => 0
NtClose(Handle=0x2f8) => 0
NtClose(Handle=0x2fc) => 0
NtClose(Handle=0x304) => 0
NtClose(Handle=0x30c) => 0
NtClose(Handle=0x314) => 0
NtClose(Handle=0x31c) => 0
NtClose(Handle=0x324) => 0
NtClose(Handle=0x32c) => 0
NtClose(Handle=0x334) => 0
NtClose(Handle=0x33c) => 0
NtClose(Handle=0x348) => 0
NtClose(Handle=0x350) => 0
NtClose(Handle=0x358) => 0
NtClose(Handle=0x360) => 0
NtClose(Handle=0x368) => 0
NtClose(Handle=0x374) => 0
NtClose(Handle=0x37c) => 0
NtClose(Handle=0x384) => 0
NtClose(Handle=0x38c) => 0
NtClose(Handle=0x394) => 0
NtClose(Handle=0x39c) => 0
NtClose(Handle=0x3a4) => 0
NtClose(Handle=0x3ac) => 0
NtClose(Handle=0x3b4) => 0
NtClose(Handle=0x3bc) => 0
NtClose(Handle=0x3c4) => 0
NtClose(Handle=0x3cc) => 0
NtClose(Handle=0x3d4) => 0
NtClose(Handle=0x3e0) => 0
NtClose(Handle=0x3e8) => 0
NtClose(Handle=0x3f0) => 0
NtClose(Handle=0x3f8) => 0
NtClose(Handle=0x404) => 0
NtClose(Handle=0x40c) => 0
NtClose(Handle=0x414) => 0
NtClose(Handle=0x41c) => 0
NtClose(Handle=0x424) => 0
NtClose(Handle=0x42c) => 0
NtClose(Handle=0x434) => 0
NtClose(Handle=0x43c) => 0
NtClose(Handle=0x444) => 0
NtClose(Handle=0x44c) => 0
NtClose(Handle=0x454) => 0
NtClose(Handle=0x45c) => 0
NtClose(Handle=0x464) => 0
NtClose(Handle=0x46c) => 0
NtClose(Handle=0x474) => 0
NtClose(Handle=0x47c) => 0
NtClose(Handle=0x484) => 0
NtClose(Handle=0x48c) => 0
NtClose(Handle=0x494) => 0
NtClose(Handle=0x49c) => 0
NtClose(Handle=0x4a4) => 0
NtClose(Handle=0x4ac) => 0
NtClose(Handle=0x4b4) => 0
NtClose(Handle=0x4bc) => 0
NtClose(Handle=0x4c4) => 0
NtClose(Handle=0x4cc) => 0
NtClose(Handle=0x4d4) => 0
NtClose(Handle=0x4dc) => 0
NtClose(Handle=0x4e4) => 0
NtClose(Handle=0x4ec) => 0
NtClose(Handle=0x4f4) => 0
NtClose(Handle=0x4fc) => 0
NtClose(Handle=0x504) => 0
NtClose(Handle=0x50c) => 0
NtClose(Handle=0x514) => 0
NtClose(Handle=0x51c) => 0
NtClose(Handle=0x524) => 0
NtClose(Handle=0x52c) => 0
NtClose(Handle=0x534) => 0
NtClose(Handle=0x53c) => 0
NtClose(Handle=0x544) => 0
NtClose(Handle=0x54c) => 0
NtClose(Handle=0x554) => 0
NtClose(Handle=0x55c) => 0
NtClose(Handle=0x564) => 0
NtClose(Handle=0x56c) => 0
NtClose(Handle=0x24c) => 0
done: 100 pipes, one GetQueuedCompletionStatus slept 2.01s, 0 completions, 0 bytes
NtWriteFile(FileHandle=0x9ac, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xaaa6cdf4e0 [0/0x54], Buffer=0x28e7bdde3f0, Length=0x54, ByteOffset=null, Key=null) => 0
NtClose(Handle=0x104) => 0
NtFreeVirtualMemory(ProcessHandle=-1, lpAddress=0xaaa6cdfca8 [0x0000028e7bb00000], pSize=0xaaa6cdfca0 [0x4000], flFreeType=0x8000) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", Attributes=0xaaa6cdf7b0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xaaa6cdf7f8 [0x24c], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", IoStatusBlock=0xaaa6cdf860 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xaaa6cdf800 [0x104], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x24c) => 0
Loaded DLL at 00007FF9BC190000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll
NtMapViewOfSection(SectionHandle=0x104, ProcessHandle=-1, BaseAddress=0x28e7bff1fe0 [0x00007ff9bc190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x28e72b6a768 [0x00031000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdfd88 [0x00007ff9bf020000], Size=0xaaa6cdfd80 [0x1000], NewProtect=4, OldProtect=0xaaa6cdfdc0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xaaa6cdfd88 [0x00007ff9bf020000], Size=0xaaa6cdfd80 [0x1000], NewProtect=2, OldProtect=0xaaa6cdfdc0 [4]) => 0
NtQueryWnfStateData(StateName=0xaaa6cdf700 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0xaaa6cde5d4 [0x5771], Buffer=0xaaa6cde6b0, BufferSize=0xaaa6cde5d0 [0xffe]) => 0
NtClose(Handle=0x1b4) => 0
NtClose(Handle=0x1ac) => 0
NtClose(Handle=0x1b0) => 0
NtClose(Handle=0xe8) => 0
NtClose(Handle=0x170) => 0
NtClose(Handle=0x1a4) => 0
NtQueryWnfStateData(StateName=0xaaa6cdf730 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0xaaa6cde604 [0x5771], Buffer=0xaaa6cde6e0, BufferSize=0xaaa6cde600 [0xffe]) => 0
NtClose(Handle=0x168) => 0
NtQueryWnfStateData(StateName=0xaaa6cdf7f0 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0xaaa6cde744 [0x5771], Buffer=0xaaa6cde798, BufferSize=0xaaa6cde740 [0xffe]) => 0
Process 10468 exit code: 0
