Process 12064 starting at 00007FF6CBD819A0 with command line: "wait_iocp.exe 100 2"
C:\Users\administrator\pb158\demo\waiting\wait_iocp.exe
Loaded DLL at 00007FF9C3290000 ntdll.dll
Loaded DLL at 00007FF9C1D20000 C:\WINDOWS\System32\xtajit64se.dll
Loaded DLL at 00007FF9C1380000 C:\WINDOWS\System32\KERNEL32.DLL
NtMapViewOfSection(SectionHandle=0x88, ProcessHandle=-1, BaseAddress=0x12cfac97840 [0x00007ff9c1380000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x12cfac99dd8 [0x00169000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BE5D0000 C:\WINDOWS\System32\KERNELBASE.dll
NtMapViewOfSection(SectionHandle=0x8c, ProcessHandle=-1, BaseAddress=0x12cfac97fe0 [0x00007ff9be5d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x12cfac97f28 [0x006da000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQuerySystemInformation(SystemInformationClass=0x32 [SystemRangeStartInformation], SystemInformation=0x9e614df80, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9bec10e80, Length=0x40, ReturnLength=null) => 0
NtCreateSection(SectionHandle=0x9e614dd98 [0x8c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x1f, ObjectAttributes=null, SectionSize=0x9e614dda8 [65536], Protect=4, Attributes=0x08000000, FileHandle=0) => 0
NtMapViewOfSection(SectionHandle=0x88, ProcessHandle=-1, BaseAddress=0x9e614dda0 [0x00007ff3c6740000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x9e614dde0 [0x00100000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtGetNlsSectionPtr(SectionType=0xe, SectionData=0, ContextData=null, SectionPointer=0x9e614df58 [0x0000012cfb2c0000], SectionSize=null) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x4e4, ContextData=null, SectionPointer=0x9e614def8 [0x0000012cfb3b0000], SectionSize=0x9e614df00 [0x00011000]) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x1b5, ContextData=null, SectionPointer=0x9e614def8 [0x0000012cfb3d0000], SectionSize=0x9e614df00 [0x00011000]) => 0
NtCreateFile(FileHandle=0x9e614df48 [0x94], DesiredAccess=READ_CONTROL|SYNCHRONIZE|0x19f, ObjectAttributes=4:"\Connect", IoStatusBlock=0x9e614d980 [0/0x18], AllocationSize=null, FileAttributes=0, ShareAccess=7, CreateDisposition=2, CreateOptions=0x20, EaBuffer=0x12cfac9b540, EaLength=0x54b) => 0
NtDeviceIoControlFile(FileHandle=0x94, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x9e614df10 [0/0], IoControlCode=0x00500023, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x9e614df00, OutputBufferLength=8) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x31 [ProcessOwnerInformation], ProcessInformation=0x9e614df08, Length=8) => 0
NtDeviceIoControlFile(FileHandle=0x94, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x9e614ddb0, IoControlCode=0x00500016, InputBuffer=0x9e614ddc0, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc00700bb [187 'The specified system semaphore name was not found.']
NtOpenProcessToken(ProcessHandle=-1, DesiredAccess=0x8, TokenHandle=0x9e614ddd0 [0x88]) => 0
NtQueryInformationToken(TokenHandle=0x88, TokenInformationClass=0xc [TokenSessionId], TokenInformation=0x9e614d758, Length=4, ReturnLength=0x9e614d75c [4]) => 0
NtQueryInformationToken(TokenHandle=0x88, TokenInformationClass=0x1d [TokenIsAppContainer], TokenInformation=0x9e614d780, Length=4, ReturnLength=0x9e614d75c [4]) => 0
NtQueryInformationToken(TokenHandle=0x88, TokenInformationClass=0x2a [TokenPrivateNameSpace], TokenInformation=0x9e614d718, Length=4, ReturnLength=0x9e614d75c [4]) => 0
NtOpenDirectoryObject(DirectoryHandle=0x9e614d710 [0x8c], DesiredAccess=0xf, ObjectAttributes="\BaseNamedObjects") => 0
NtQueryInformationToken(TokenHandle=0x88, TokenInformationClass=0x2c [TokenBnoIsolation], TokenInformation=0x9e614da28, Length=0x120, ReturnLength=0x9e614d75c [0x10]) => 0
NtClose(Handle=0x88) => 0
NtCreateMutant(MutantHandle=0x9e614de18 [0x88], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x8c:"Local\SM0:12064:304:WilStaging_02", InitialOwner=false) => 0
NtWaitForSingleObject(Handle=0x88, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0x9e614db68, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x8c:"Local\SM0:12064:304:WilStaging_02_p0") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateSemaphore(SemaphoreHandle=0x9e614db08 [0xa4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x8c:"Local\SM0:12064:304:WilStaging_02_p0", InitialCount=0x3eb26eb0, MaxCount=0x3eb26eb0) => 0
NtCreateSemaphore(SemaphoreHandle=0x9e614db00 [0xa8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x8c:"Local\SM0:12064:304:WilStaging_02_p0h", InitialCount=0x96, MaxCount=0x96) => 0
NtReleaseMutant(MutantHandle=0x88, PreviousCount=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9c14d70c0, Length=0x40, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0x9e614e848 [0xb8], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\FileSystem\") => 0
NtQueryValueKey(KeyHandle=0xb8, ValueName="LongPathsEnabled", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614e880, Length=0x14, ResultLength=0x9e614e840 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xb8, ValueName="LPGO", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614e880, Length=0x14, ResultLength=0x9e614e840) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xb8) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", Attributes=0x9e614e220 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x9e614e268 [0xb8], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", IoStatusBlock=0x9e614e2d0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x9e614e270 [0xbc], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xb8) => 0
Loaded DLL at 00007FF9BE160000 C:\WINDOWS\SYSTEM32\apphelp.dll
NtMapViewOfSection(SectionHandle=0xbc, ProcessHandle=-1, BaseAddress=0x12cfac97c90 [0x00007ff9be160000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x12cfac97bb8 [0x00106000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtOpenKey(KeyHandle=0x9e614dbb8 [0xc4], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xc4, ValueName="LogFlags", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614db90, Length=0x14, ResultLength=0x9e614db80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc4) => 0
NtOpenKey(KeyHandle=0x9e614dbb8, DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\OSDATA\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x9e614de18 [0xd4], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="ShowDebugInfo", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614ddf0, Length=0x14, ResultLength=0x9e614dde0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x9e614e198 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp.exe", IoStatusBlock=0x9e614e210 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x9e614e1a8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x12cfaca1530, SecurityDescriptorLength=0x24, ReturnLength=0x9e614e1a8 [0x24]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x9e614e198 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\ntdll.dll", IoStatusBlock=0x9e614e210 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x9e614e1a8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x12cfaca1930, SecurityDescriptorLength=0x34, ReturnLength=0x9e614e1a8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x9e614e198 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\xtajit64se.dll", IoStatusBlock=0x9e614e210 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x9e614e1a8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x12cfaca1930, SecurityDescriptorLength=0x34, ReturnLength=0x9e614e1a8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x9e614e198 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNEL32.DLL", IoStatusBlock=0x9e614e210 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x9e614e1a8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x12cfaca1930, SecurityDescriptorLength=0x34, ReturnLength=0x9e614e1a8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x9e614e198 [0xd8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNELBASE.dll", IoStatusBlock=0x9e614e210 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x9e614e1a8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x12cfaca1930, SecurityDescriptorLength=0x34, ReturnLength=0x9e614e1a8 [0x34]) => 0
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0x9e614dc78 [0xdc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xdc, ValueName="StagedDelete_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x9e614dcb0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xdc) => 0
NtOpenKey(KeyHandle=0x9e614dc78 [0xdc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xdc, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x9e614dcb0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryValueKey(KeyHandle=0xdc, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x12cfaca2c20, Length=0x48, ResultLength=0x9e614dcb0 [0x46]) => 0
NtQueryValueKey(KeyHandle=0xdc, ValueName="MergeVer_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614dc50, Length=0x14, ResultLength=0x9e614dc40 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xdc, ValueName="MergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614dc50, Length=0x14, ResultLength=0x9e614dc40 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xdc, ValueName="MinMergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614dc50, Length=0x14, ResultLength=0x9e614dc40 [0x10]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD4957C75C2429.sysmain.sdb", IoStatusBlock=0x9e614dbd0 [0/0x48], FileInformation=0x9e614dc50, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\sysmain.sdb", IoStatusBlock=0x9e614dbd0 [0/0x48], FileInformation=0x9e614dc50, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtOpenKey(KeyHandle=0x9e614db88 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614db60, Length=0x14, ResultLength=0x9e614db50) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtOpenKey(KeyHandle=0x9e614dbd8 [0xe4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xe4, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x12cfaca2db0, Length=0x28, ResultLength=0x9e614dc74 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xe4, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x12cfaca2db0, Length=0x28, ResultLength=0x9e614dc74 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xe4, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x12cfaca2e10, Length=0x230, ResultLength=0x9e614dc74 [0x74]) => 0
NtClose(Handle=0xe4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\apppatch\MergeSdbFilesSource\sysMerge.sdb", IoStatusBlock=0x9e614dbd0 [0/0x48], FileInformation=0x9e614dc50, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtClose(Handle=0xdc) => 0
NtCreateFile(FileHandle=0x9e614dd60 [0xdc], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD4957C75C2429.sysmain.sdb", IoStatusBlock=0x9e614dd70 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryInformationFile(FileHandle=0xdc, IoStatusBlock=0x9e614de00 [0/0x18], FileInformation=0x9e614de10, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtQueryInformationFile(FileHandle=0xdc, IoStatusBlock=0x9e614ddf0 [0/0x18], FileInformation=0x9e614de00, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtCreateSection(SectionHandle=0x9e614dda0 [0xe0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0xdc) => 0
NtMapViewOfSection(SectionHandle=0xe0, ProcessHandle=-1, BaseAddress=0x9e614dda8 [0x00007ff3c6330000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x9e614ddb0 [0x0040d000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtOpenKey(KeyHandle=0x9e614dd58 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x9e614dd30, Length=0x14, ResultLength=0x9e614dd20) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0x9e614dda8 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x12cfaca2ca0, Length=0x28, ResultLength=0x9e614de44 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x12cfaca2ca0, Length=0x28, ResultLength=0x9e614de44 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd8, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x12cfaca2e50, Length=0x230, ResultLength=0x9e614de44 [0x74]) => 0
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0x9e614dca8 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="StagedDelete_sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x9e614dce0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0x9e614dca8 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x9e614dce0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenProcess(ProcessHandle=0x9e614db30 [0xe8], DesiredAccess=0x1000, ObjectAttributes=null, ClientId=0x9e614db38 [0x2f20/0]) => 0
NtOpenProcessToken(ProcessHandle=0xe8, DesiredAccess=0x8, TokenHandle=0x9e614db00 [0xd8]) => 0
NtQueryInformationToken(TokenHandle=0xd8, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=null, Length=0, ReturnLength=0x9e614da70) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryInformationToken(TokenHandle=0xd8, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=0x12cfaca2f80, Length=0xe8, ReturnLength=0x9e614da70 [0xe8]) => 0
NtClose(Handle=0xd8) => 0
NtCreateFile(FileHandle=0x9e614d960 [0xd4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp.exe", IoStatusBlock=0x9e614d8f0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0x9e614d858 [0xd8], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x12cfaca32a0, Length=0x208, ResultLength=0x9e614d850) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtApphelpCacheControl(ServiceClass=0, ServiceData="") => 0xc0000225 [1168 'Element not found.']
NtClose(Handle=0xd4) => 0
NtCreateFile(FileHandle=0x9e614d798 [0xec], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_iocp.exe", IoStatusBlock=0x9e614d700 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0x9e614d668 [0xd8], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x12cfaca32a0, Length=0x208, ResultLength=0x9e614d660) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtApphelpCacheControl(ServiceClass=2, ServiceData="") => 0
NtClose(Handle=0xec) => 0
NtClose(Handle=0xe8) => 0
NtOpenMutant(MutantHandle=0x9e614df18, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0x8c:"Local\ShimViewer") => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xdc) => 0
NtClose(Handle=0xe0) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x7ff3c6330000) => 0
Initial breakpoint
NtTestAlert() => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f988 [0x00007ff6cbdaa000], Size=0x9e614f980 [0x1000], NewProtect=2, OldProtect=0x9e614fa90 [8]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f908 [0x00007ff6cbdaa000], Size=0x9e614f900 [0x1000], NewProtect=4, OldProtect=0x9e614fa40 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f908 [0x00007ff6cbdaa000], Size=0x9e614f900 [0x1000], NewProtect=2, OldProtect=0x9e614fa40 [4]) => 0
NtQueryVolumeInformationFile(FileHandle=0x290, IoStatusBlock=0x9e614f960 [0/8], FsInformation=0x9e614f950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa30, IoStatusBlock=0x9e614f960 [0/8], FsInformation=0x9e614f950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1e8, IoStatusBlock=0x9e614f960 [0/8], FsInformation=0x9e614f950, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614eb28 [0x00007ff6cbdaa000], Size=0x9e614eb20 [0x1000], NewProtect=4, OldProtect=0x9e614ec60 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614eb28 [0x00007ff6cbdaa000], Size=0x9e614eb20 [0x1000], NewProtect=2, OldProtect=0x9e614ec60 [4]) => 0
NtOpenKey(KeyHandle=0x9e614e7b0 [0xd8], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\Sorting\Versions") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x9e614e7e0, Length=0x214, ResultLength=0x9e614ea10 [0x2a]) => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="000605xx", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x9e614e1c0, Length=0x214, ResultLength=0x9e614e400 [0x42]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f628 [0x00007ff6cbdaa000], Size=0x9e614f620 [0x1000], NewProtect=4, OldProtect=0x9e614f760 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f628 [0x00007ff6cbdaa000], Size=0x9e614f620 [0x1000], NewProtect=2, OldProtect=0x9e614f760 [4]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6cbd81e50, MemoryInformationClass=0 [MemoryBasicInformation], MemoryInformation=0x9e614f700, Length=0x30, ReturnLength=0x9e614f6f0 [0x30]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6cbd81e50, MemoryInformationClass=3 [MemoryRegionInformation], MemoryInformation=0x9e614f730, Length=0x30, ReturnLength=null) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6cbd81e50, MemoryInformationClass=2 [MemoryMappedFilenameInformation], MemoryInformation=0x9e614f798, Length=0x21a, ReturnLength=null) => 0
NtCreateIoCompletion(IoHandle=0x9e614f860 [0xe0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, NumberOfConcurrentThreads=0) => 0
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x100], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-0", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-0", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x100, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x100, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x100, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8d20, IoStatusBlock=0x12cfaca8d20, Buffer=0x12cfacabfd0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x108], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-1", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0xdc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-1", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x108, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x108, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x108, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8d40, IoStatusBlock=0x12cfaca8d40, Buffer=0x12cfacac010, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x10c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-2", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x110], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-2", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x10c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x10c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x10c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8d60, IoStatusBlock=0x12cfaca8d60, Buffer=0x12cfacac050, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x114], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-3", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0xec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-3", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x114, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x114, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x114, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8d80, IoStatusBlock=0x12cfaca8d80, Buffer=0x12cfacac090, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x118], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-4", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x11c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-4", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x118, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x118, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x118, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8da0, IoStatusBlock=0x12cfaca8da0, Buffer=0x12cfacac0d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x120], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-5", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x124], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-5", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x120, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x120, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x120, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8dc0, IoStatusBlock=0x12cfaca8dc0, Buffer=0x12cfacac110, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0xd4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-6", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x128], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-6", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0xd4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0xd4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0xd4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8de0, IoStatusBlock=0x12cfaca8de0, Buffer=0x12cfacac150, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x12c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-7", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x130], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-7", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x12c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x12c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x12c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8e00, IoStatusBlock=0x12cfaca8e00, Buffer=0x12cfacac190, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x134], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-8", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x138], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-8", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x134, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x134, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x134, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8e20, IoStatusBlock=0x12cfaca8e20, Buffer=0x12cfacac1d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x13c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-9", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x140], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-9", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x13c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x13c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x13c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8e40, IoStatusBlock=0x12cfaca8e40, Buffer=0x12cfacac210, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x144], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-10", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x148], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-10", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x144, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x144, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x144, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8e60, IoStatusBlock=0x12cfaca8e60, Buffer=0x12cfacac250, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x14c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-11", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x150], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-11", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x14c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x14c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x14c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8e80, IoStatusBlock=0x12cfaca8e80, Buffer=0x12cfacac290, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x154], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-12", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x158], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-12", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x154, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x154, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x154, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8ea0, IoStatusBlock=0x12cfaca8ea0, Buffer=0x12cfacac2d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-13", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x160], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-13", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x15c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x15c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8ec0, IoStatusBlock=0x12cfaca8ec0, Buffer=0x12cfacac310, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-14", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x168], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-14", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x164, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x164, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8ee0, IoStatusBlock=0x12cfaca8ee0, Buffer=0x12cfacac350, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x16c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-15", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x170], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-15", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x16c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x16c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8f00, IoStatusBlock=0x12cfaca8f00, Buffer=0x12cfacac390, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x174], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-16", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x178], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-16", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x174, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x174, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x174, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8f20, IoStatusBlock=0x12cfaca8f20, Buffer=0x12cfacac3d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x17c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-17", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x184], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-17", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x17c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x17c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x17c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8f40, IoStatusBlock=0x12cfaca8f40, Buffer=0x12cfacac410, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x188], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-18", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x18c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-18", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x188, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x188, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x188, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8f60, IoStatusBlock=0x12cfaca8f60, Buffer=0x12cfacac450, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x194], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-19", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x198], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-19", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x194, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x194, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x194, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8f80, IoStatusBlock=0x12cfaca8f80, Buffer=0x12cfacac490, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-20", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1a4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-20", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1a0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1a0, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1a0, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8fa0, IoStatusBlock=0x12cfaca8fa0, Buffer=0x12cfacac4d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-21", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-21", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1ac, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1ac, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8fc0, IoStatusBlock=0x12cfaca8fc0, Buffer=0x12cfacac510, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-22", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1bc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-22", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1b4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1b4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca8fe0, IoStatusBlock=0x12cfaca8fe0, Buffer=0x12cfacac550, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1c0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-23", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1c4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-23", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1c0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1c0, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1c0, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9000, IoStatusBlock=0x12cfaca9000, Buffer=0x12cfacac590, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-24", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-24", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1c8, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1c8, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9020, IoStatusBlock=0x12cfaca9020, Buffer=0x12cfacac5d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-25", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-25", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1d0, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1d0, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9040, IoStatusBlock=0x12cfaca9040, Buffer=0x12cfacac610, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-26", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1f4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-26", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1e4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1e4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9060, IoStatusBlock=0x12cfaca9060, Buffer=0x12cfacac650, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x1f8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-27", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x1fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-27", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1f8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x1f8, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x1f8, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9080, IoStatusBlock=0x12cfaca9080, Buffer=0x12cfacac690, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x200], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-28", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x208], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-28", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x200, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x200, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x200, Event=0, ApcRoutine=null, ApcContext=0x12cfaca90a0, IoStatusBlock=0x12cfaca90a0, Buffer=0x12cfacac6d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x20c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-29", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x210], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-29", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x20c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x20c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x20c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca90c0, IoStatusBlock=0x12cfaca90c0, Buffer=0x12cfacac710, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x214], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-30", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x21c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-30", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x214, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x214, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x214, Event=0, ApcRoutine=null, ApcContext=0x12cfaca90e0, IoStatusBlock=0x12cfaca90e0, Buffer=0x12cfacac750, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x220], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-31", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x224], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-31", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x220, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x220, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x220, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9100, IoStatusBlock=0x12cfaca9100, Buffer=0x12cfacac790, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-32", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x22c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-32", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x228, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x228, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9120, IoStatusBlock=0x12cfaca9120, Buffer=0x12cfacac7d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x230], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-33", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x234], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-33", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x230, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x230, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x230, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9140, IoStatusBlock=0x12cfaca9140, Buffer=0x12cfacac810, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x238], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-34", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x23c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-34", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x238, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x238, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x238, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9160, IoStatusBlock=0x12cfaca9160, Buffer=0x12cfacac850, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x240], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-35", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-35", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x240, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x240, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x240, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9180, IoStatusBlock=0x12cfaca9180, Buffer=0x12cfacac890, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x248], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-36", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x24c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-36", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x248, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x248, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x248, Event=0, ApcRoutine=null, ApcContext=0x12cfaca91a0, IoStatusBlock=0x12cfaca91a0, Buffer=0x12cfacac8d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x250], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-37", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x254], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-37", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x250, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x250, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x250, Event=0, ApcRoutine=null, ApcContext=0x12cfaca91c0, IoStatusBlock=0x12cfaca91c0, Buffer=0x12cfacac910, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x258], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-38", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x25c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-38", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x258, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x258, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x258, Event=0, ApcRoutine=null, ApcContext=0x12cfaca91e0, IoStatusBlock=0x12cfaca91e0, Buffer=0x12cfacac950, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x260], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-39", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x264], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-39", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x260, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x260, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x260, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9200, IoStatusBlock=0x12cfaca9200, Buffer=0x12cfacac990, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x268], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-40", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x26c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-40", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x268, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x268, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x268, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9220, IoStatusBlock=0x12cfaca9220, Buffer=0x12cfacac9d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x270], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-41", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x274], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-41", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x270, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x270, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x270, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9240, IoStatusBlock=0x12cfaca9240, Buffer=0x12cfacaca10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x278], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-42", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x27c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-42", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x278, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x278, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x278, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9260, IoStatusBlock=0x12cfaca9260, Buffer=0x12cfacaca50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x284], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-43", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x288], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-43", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x284, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x284, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x284, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9280, IoStatusBlock=0x12cfaca9280, Buffer=0x12cfacaca90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x28c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-44", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x298], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-44", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x28c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x28c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x28c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca92a0, IoStatusBlock=0x12cfaca92a0, Buffer=0x12cfacacad0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x29c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-45", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2a4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-45", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x29c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x29c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x29c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca92c0, IoStatusBlock=0x12cfaca92c0, Buffer=0x12cfacacb10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2a8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-46", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2ac], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-46", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2a8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2a8, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2a8, Event=0, ApcRoutine=null, ApcContext=0x12cfaca92e0, IoStatusBlock=0x12cfaca92e0, Buffer=0x12cfacacb50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2b0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-47", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-47", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2b0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2b0, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2b0, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9300, IoStatusBlock=0x12cfaca9300, Buffer=0x12cfacacb90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2b8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-48", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-48", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2b8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2b8, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2b8, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9320, IoStatusBlock=0x12cfaca9320, Buffer=0x12cfacacbd0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-49", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-49", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2cc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2cc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9340, IoStatusBlock=0x12cfaca9340, Buffer=0x12cfacacc10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-50", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2d8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-50", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2d4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2d4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9360, IoStatusBlock=0x12cfaca9360, Buffer=0x12cfacacc50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2dc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-51", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2e0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-51", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2dc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2dc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9380, IoStatusBlock=0x12cfaca9380, Buffer=0x12cfacacc90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-52", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2e8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-52", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2e4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2e4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca93a0, IoStatusBlock=0x12cfaca93a0, Buffer=0x12cfacaccd0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2ec], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-53", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2f0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-53", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2ec, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2ec, Event=0, ApcRoutine=null, ApcContext=0x12cfaca93c0, IoStatusBlock=0x12cfaca93c0, Buffer=0x12cfacacd10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-54", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x2f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-54", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2f4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2f4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca93e0, IoStatusBlock=0x12cfaca93e0, Buffer=0x12cfacacd50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x2fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-55", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x300], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-55", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x2fc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x2fc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9400, IoStatusBlock=0x12cfaca9400, Buffer=0x12cfacacd90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x304], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-56", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x308], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-56", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x304, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x304, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x304, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9420, IoStatusBlock=0x12cfaca9420, Buffer=0x12cfacacdd0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x30c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-57", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x310], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-57", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x30c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x30c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x30c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9440, IoStatusBlock=0x12cfaca9440, Buffer=0x12cfacace10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x314], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-58", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x318], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-58", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x314, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x314, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x314, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9460, IoStatusBlock=0x12cfaca9460, Buffer=0x12cfacace50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x31c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-59", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x320], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-59", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x31c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x31c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x31c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9480, IoStatusBlock=0x12cfaca9480, Buffer=0x12cfacace90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x324], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-60", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x328], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-60", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x324, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x324, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x324, Event=0, ApcRoutine=null, ApcContext=0x12cfaca94a0, IoStatusBlock=0x12cfaca94a0, Buffer=0x12cfacaced0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x32c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-61", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x330], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-61", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x32c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x32c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x32c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca94c0, IoStatusBlock=0x12cfaca94c0, Buffer=0x12cfacacf10, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x334], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-62", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x338], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-62", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x334, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x334, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x334, Event=0, ApcRoutine=null, ApcContext=0x12cfaca94e0, IoStatusBlock=0x12cfaca94e0, Buffer=0x12cfacacf50, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x33c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-63", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x340], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-63", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x33c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x33c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x33c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9500, IoStatusBlock=0x12cfaca9500, Buffer=0x12cfacacf90, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x344], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-64", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x348], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-64", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x344, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x344, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x344, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9520, IoStatusBlock=0x12cfaca9520, Buffer=0x12cfacacfd0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x34c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-65", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x350], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-65", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x34c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x34c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x34c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9540, IoStatusBlock=0x12cfaca9540, Buffer=0x12cfacad010, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x354], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-66", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x358], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-66", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x354, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x354, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x354, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9560, IoStatusBlock=0x12cfaca9560, Buffer=0x12cfacad050, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x35c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-67", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x360], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-67", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x35c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x35c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x35c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9580, IoStatusBlock=0x12cfaca9580, Buffer=0x12cfacad090, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x364], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-68", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x368], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-68", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x364, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x364, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x364, Event=0, ApcRoutine=null, ApcContext=0x12cfaca95a0, IoStatusBlock=0x12cfaca95a0, Buffer=0x12cfacad0d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x36c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-69", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x370], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-69", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x36c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x36c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x36c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca95c0, IoStatusBlock=0x12cfaca95c0, Buffer=0x12cfacad110, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x374], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-70", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x378], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-70", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x374, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x374, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x374, Event=0, ApcRoutine=null, ApcContext=0x12cfaca95e0, IoStatusBlock=0x12cfaca95e0, Buffer=0x12cfacad150, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x37c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-71", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x380], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-71", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x37c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x37c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x37c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9600, IoStatusBlock=0x12cfaca9600, Buffer=0x12cfacad190, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x384], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-72", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x388], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-72", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x384, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x384, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x384, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9620, IoStatusBlock=0x12cfaca9620, Buffer=0x12cfacad1d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x38c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-73", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x390], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-73", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x38c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x38c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x38c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9640, IoStatusBlock=0x12cfaca9640, Buffer=0x12cfacad210, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x394], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-74", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x398], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-74", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x394, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x394, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x394, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9660, IoStatusBlock=0x12cfaca9660, Buffer=0x12cfacad250, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x39c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-75", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-75", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x39c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x39c, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x39c, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9680, IoStatusBlock=0x12cfaca9680, Buffer=0x12cfacad290, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-76", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-76", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3a4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3a4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca96a0, IoStatusBlock=0x12cfaca96a0, Buffer=0x12cfacad2d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-77", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-77", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3ac, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3ac, Event=0, ApcRoutine=null, ApcContext=0x12cfaca96c0, IoStatusBlock=0x12cfaca96c0, Buffer=0x12cfacad310, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-78", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3b8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-78", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3b4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3b4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca96e0, IoStatusBlock=0x12cfaca96e0, Buffer=0x12cfacad350, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3bc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-79", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3c0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-79", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3bc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3bc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9700, IoStatusBlock=0x12cfaca9700, Buffer=0x12cfacad390, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3c4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-80", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-80", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3c4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3c4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9720, IoStatusBlock=0x12cfaca9720, Buffer=0x12cfacad3d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-81", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-81", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3cc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3cc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9740, IoStatusBlock=0x12cfaca9740, Buffer=0x12cfacad410, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-82", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3d8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-82", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3d4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3d4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9760, IoStatusBlock=0x12cfaca9760, Buffer=0x12cfacad450, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3dc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-83", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3e0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-83", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3dc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3dc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3dc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9780, IoStatusBlock=0x12cfaca9780, Buffer=0x12cfacad490, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-84", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3e8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-84", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3e4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3e4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca97a0, IoStatusBlock=0x12cfaca97a0, Buffer=0x12cfacad4d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3ec], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-85", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3f0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-85", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3ec, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3ec, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3ec, Event=0, ApcRoutine=null, ApcContext=0x12cfaca97c0, IoStatusBlock=0x12cfaca97c0, Buffer=0x12cfacad510, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-86", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x3f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-86", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3f4, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3f4, Event=0, ApcRoutine=null, ApcContext=0x12cfaca97e0, IoStatusBlock=0x12cfaca97e0, Buffer=0x12cfacad550, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x3fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-87", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x404], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-87", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x3fc, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x3fc, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9800, IoStatusBlock=0x12cfaca9800, Buffer=0x12cfacad590, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x408], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-88", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x40c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-88", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x408, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x408, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x408, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9820, IoStatusBlock=0x12cfaca9820, Buffer=0x12cfacad5d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x410], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-89", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x414], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-89", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x410, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x410, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x410, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9840, IoStatusBlock=0x12cfaca9840, Buffer=0x12cfacad610, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x418], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-90", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x41c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-90", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x418, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x418, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x418, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9860, IoStatusBlock=0x12cfaca9860, Buffer=0x12cfacad650, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x420], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-91", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x424], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-91", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x420, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x420, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x420, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9880, IoStatusBlock=0x12cfaca9880, Buffer=0x12cfacad690, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x428], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-92", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x42c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-92", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x428, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x428, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x428, Event=0, ApcRoutine=null, ApcContext=0x12cfaca98a0, IoStatusBlock=0x12cfaca98a0, Buffer=0x12cfacad6d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x430], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-93", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x434], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-93", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x430, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x430, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x430, Event=0, ApcRoutine=null, ApcContext=0x12cfaca98c0, IoStatusBlock=0x12cfaca98c0, Buffer=0x12cfacad710, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x438], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-94", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x43c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-94", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x438, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x438, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x438, Event=0, ApcRoutine=null, ApcContext=0x12cfaca98e0, IoStatusBlock=0x12cfaca98e0, Buffer=0x12cfacad750, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x440], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-95", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x444], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-95", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x440, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x440, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x440, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9900, IoStatusBlock=0x12cfaca9900, Buffer=0x12cfacad790, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x448], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-96", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x44c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-96", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x448, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x448, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x448, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9920, IoStatusBlock=0x12cfaca9920, Buffer=0x12cfacad7d0, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x450], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-97", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x454], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-97", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x450, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x450, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x450, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9940, IoStatusBlock=0x12cfaca9940, Buffer=0x12cfacad810, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x458], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-98", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x45c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-98", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x458, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x458, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x458, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9960, IoStatusBlock=0x12cfaca9960, Buffer=0x12cfacad850, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtCreateNamedPipeFile(NamedPipeHandle=0x9e614f770 [0x460], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-iocp-c-99", IoStatusBlock=0x9e614f7d0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x9e614f780 [-500000]) => 0
NtCreateFile(FileHandle=0x9e614f6c8 [0x464], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-iocp-c-99", IoStatusBlock=0x9e614f700 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x460, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x9e614f880, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtSetInformationFile(FileHandle=0x460, IoStatusBlock=0x9e614f880 [0/0], FileInformation=0x9e614f868, Length=0x10, FileInformationClass=0x1e [FileCompletionInformation]) => 0
NtReadFile(FileHandle=0x460, Event=0, ApcRoutine=null, ApcContext=0x12cfaca9980, IoStatusBlock=0x12cfaca9980, Buffer=0x12cfacad890, Length=0x40, ByteOffset=0x9e614f870 [0], Key=null) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=2 [ProcessIoCounters], ProcessInformation=0x9e614fa08, Length=0x30, ReturnLength=null) => 0
NtRemoveIoCompletion(IoHandle=0xe0, Key=0x9e614f9b0 [0], Overlapped=0x9e614f888, IoStatusBlock=0x9e614f890 [0/0], Timeout=0x9e614f880 [-2e+07]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=2 [ProcessIoCounters], ProcessInformation=0x9e614f9d8, Length=0x30, ReturnLength=null) => 0
NtCancelIoFileEx(hFile=0x100, IoStatusBlockIn=0x12cfaca8d20 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x100) => 0
NtClose(Handle=0x104) => 0
NtCancelIoFileEx(hFile=0x108, IoStatusBlockIn=0x12cfaca8d40 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x108) => 0
NtClose(Handle=0xdc) => 0
NtCancelIoFileEx(hFile=0x10c, IoStatusBlockIn=0x12cfaca8d60 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x10c) => 0
NtClose(Handle=0x110) => 0
NtCancelIoFileEx(hFile=0x114, IoStatusBlockIn=0x12cfaca8d80 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x114) => 0
NtClose(Handle=0xec) => 0
NtCancelIoFileEx(hFile=0x118, IoStatusBlockIn=0x12cfaca8da0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x118) => 0
NtClose(Handle=0x11c) => 0
NtCancelIoFileEx(hFile=0x120, IoStatusBlockIn=0x12cfaca8dc0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x120) => 0
NtClose(Handle=0x124) => 0
NtCancelIoFileEx(hFile=0xd4, IoStatusBlockIn=0x12cfaca8de0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0xd4) => 0
NtClose(Handle=0x128) => 0
NtCancelIoFileEx(hFile=0x12c, IoStatusBlockIn=0x12cfaca8e00 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x12c) => 0
NtClose(Handle=0x130) => 0
NtCancelIoFileEx(hFile=0x134, IoStatusBlockIn=0x12cfaca8e20 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x134) => 0
NtClose(Handle=0x138) => 0
NtCancelIoFileEx(hFile=0x13c, IoStatusBlockIn=0x12cfaca8e40 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x13c) => 0
NtClose(Handle=0x140) => 0
NtCancelIoFileEx(hFile=0x144, IoStatusBlockIn=0x12cfaca8e60 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x144) => 0
NtClose(Handle=0x148) => 0
NtCancelIoFileEx(hFile=0x14c, IoStatusBlockIn=0x12cfaca8e80 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x14c) => 0
NtClose(Handle=0x150) => 0
NtCancelIoFileEx(hFile=0x154, IoStatusBlockIn=0x12cfaca8ea0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x154) => 0
NtClose(Handle=0x158) => 0
NtCancelIoFileEx(hFile=0x15c, IoStatusBlockIn=0x12cfaca8ec0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x15c) => 0
NtClose(Handle=0x160) => 0
NtCancelIoFileEx(hFile=0x164, IoStatusBlockIn=0x12cfaca8ee0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x164) => 0
NtClose(Handle=0x168) => 0
NtCancelIoFileEx(hFile=0x16c, IoStatusBlockIn=0x12cfaca8f00 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x16c) => 0
NtClose(Handle=0x170) => 0
NtCancelIoFileEx(hFile=0x174, IoStatusBlockIn=0x12cfaca8f20 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x174) => 0
NtClose(Handle=0x178) => 0
NtCancelIoFileEx(hFile=0x17c, IoStatusBlockIn=0x12cfaca8f40 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x17c) => 0
NtClose(Handle=0x184) => 0
NtCancelIoFileEx(hFile=0x188, IoStatusBlockIn=0x12cfaca8f60 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x188) => 0
NtClose(Handle=0x18c) => 0
NtCancelIoFileEx(hFile=0x194, IoStatusBlockIn=0x12cfaca8f80 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x194) => 0
NtClose(Handle=0x198) => 0
NtCancelIoFileEx(hFile=0x1a0, IoStatusBlockIn=0x12cfaca8fa0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1a0) => 0
NtClose(Handle=0x1a4) => 0
NtCancelIoFileEx(hFile=0x1ac, IoStatusBlockIn=0x12cfaca8fc0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1ac) => 0
NtClose(Handle=0x1b0) => 0
NtCancelIoFileEx(hFile=0x1b4, IoStatusBlockIn=0x12cfaca8fe0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1b4) => 0
NtClose(Handle=0x1bc) => 0
NtCancelIoFileEx(hFile=0x1c0, IoStatusBlockIn=0x12cfaca9000 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1c0) => 0
NtClose(Handle=0x1c4) => 0
NtCancelIoFileEx(hFile=0x1c8, IoStatusBlockIn=0x12cfaca9020 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1c8) => 0
NtClose(Handle=0x1cc) => 0
NtCancelIoFileEx(hFile=0x1d0, IoStatusBlockIn=0x12cfaca9040 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1d0) => 0
NtClose(Handle=0x1d4) => 0
NtCancelIoFileEx(hFile=0x1e4, IoStatusBlockIn=0x12cfaca9060 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1e4) => 0
NtClose(Handle=0x1f4) => 0
NtCancelIoFileEx(hFile=0x1f8, IoStatusBlockIn=0x12cfaca9080 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x1f8) => 0
NtClose(Handle=0x1fc) => 0
NtCancelIoFileEx(hFile=0x200, IoStatusBlockIn=0x12cfaca90a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x200) => 0
NtClose(Handle=0x208) => 0
NtCancelIoFileEx(hFile=0x20c, IoStatusBlockIn=0x12cfaca90c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x20c) => 0
NtClose(Handle=0x210) => 0
NtCancelIoFileEx(hFile=0x214, IoStatusBlockIn=0x12cfaca90e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x214) => 0
NtClose(Handle=0x21c) => 0
NtCancelIoFileEx(hFile=0x220, IoStatusBlockIn=0x12cfaca9100 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x220) => 0
NtClose(Handle=0x224) => 0
NtCancelIoFileEx(hFile=0x228, IoStatusBlockIn=0x12cfaca9120 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x228) => 0
NtClose(Handle=0x22c) => 0
NtCancelIoFileEx(hFile=0x230, IoStatusBlockIn=0x12cfaca9140 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x230) => 0
NtClose(Handle=0x234) => 0
NtCancelIoFileEx(hFile=0x238, IoStatusBlockIn=0x12cfaca9160 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x238) => 0
NtClose(Handle=0x23c) => 0
NtCancelIoFileEx(hFile=0x240, IoStatusBlockIn=0x12cfaca9180 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x240) => 0
NtClose(Handle=0x244) => 0
NtCancelIoFileEx(hFile=0x248, IoStatusBlockIn=0x12cfaca91a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x248) => 0
NtClose(Handle=0x24c) => 0
NtCancelIoFileEx(hFile=0x250, IoStatusBlockIn=0x12cfaca91c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x250) => 0
NtClose(Handle=0x254) => 0
NtCancelIoFileEx(hFile=0x258, IoStatusBlockIn=0x12cfaca91e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x258) => 0
NtClose(Handle=0x25c) => 0
NtCancelIoFileEx(hFile=0x260, IoStatusBlockIn=0x12cfaca9200 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x260) => 0
NtClose(Handle=0x264) => 0
NtCancelIoFileEx(hFile=0x268, IoStatusBlockIn=0x12cfaca9220 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x268) => 0
NtClose(Handle=0x26c) => 0
NtCancelIoFileEx(hFile=0x270, IoStatusBlockIn=0x12cfaca9240 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x270) => 0
NtClose(Handle=0x274) => 0
NtCancelIoFileEx(hFile=0x278, IoStatusBlockIn=0x12cfaca9260 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x278) => 0
NtClose(Handle=0x27c) => 0
NtCancelIoFileEx(hFile=0x284, IoStatusBlockIn=0x12cfaca9280 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x284) => 0
NtClose(Handle=0x288) => 0
NtCancelIoFileEx(hFile=0x28c, IoStatusBlockIn=0x12cfaca92a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x28c) => 0
NtClose(Handle=0x298) => 0
NtCancelIoFileEx(hFile=0x29c, IoStatusBlockIn=0x12cfaca92c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x29c) => 0
NtClose(Handle=0x2a4) => 0
NtCancelIoFileEx(hFile=0x2a8, IoStatusBlockIn=0x12cfaca92e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2a8) => 0
NtClose(Handle=0x2ac) => 0
NtCancelIoFileEx(hFile=0x2b0, IoStatusBlockIn=0x12cfaca9300 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2b0) => 0
NtClose(Handle=0x2b4) => 0
NtCancelIoFileEx(hFile=0x2b8, IoStatusBlockIn=0x12cfaca9320 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2b8) => 0
NtClose(Handle=0x2c8) => 0
NtCancelIoFileEx(hFile=0x2cc, IoStatusBlockIn=0x12cfaca9340 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2cc) => 0
NtClose(Handle=0x2d0) => 0
NtCancelIoFileEx(hFile=0x2d4, IoStatusBlockIn=0x12cfaca9360 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2d4) => 0
NtClose(Handle=0x2d8) => 0
NtCancelIoFileEx(hFile=0x2dc, IoStatusBlockIn=0x12cfaca9380 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2dc) => 0
NtClose(Handle=0x2e0) => 0
NtCancelIoFileEx(hFile=0x2e4, IoStatusBlockIn=0x12cfaca93a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2e4) => 0
NtClose(Handle=0x2e8) => 0
NtCancelIoFileEx(hFile=0x2ec, IoStatusBlockIn=0x12cfaca93c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2ec) => 0
NtClose(Handle=0x2f0) => 0
NtCancelIoFileEx(hFile=0x2f4, IoStatusBlockIn=0x12cfaca93e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2f4) => 0
NtClose(Handle=0x2f8) => 0
NtCancelIoFileEx(hFile=0x2fc, IoStatusBlockIn=0x12cfaca9400 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x2fc) => 0
NtClose(Handle=0x300) => 0
NtCancelIoFileEx(hFile=0x304, IoStatusBlockIn=0x12cfaca9420 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x304) => 0
NtClose(Handle=0x308) => 0
NtCancelIoFileEx(hFile=0x30c, IoStatusBlockIn=0x12cfaca9440 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x30c) => 0
NtClose(Handle=0x310) => 0
NtCancelIoFileEx(hFile=0x314, IoStatusBlockIn=0x12cfaca9460 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x314) => 0
NtClose(Handle=0x318) => 0
NtCancelIoFileEx(hFile=0x31c, IoStatusBlockIn=0x12cfaca9480 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x31c) => 0
NtClose(Handle=0x320) => 0
NtCancelIoFileEx(hFile=0x324, IoStatusBlockIn=0x12cfaca94a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x324) => 0
NtClose(Handle=0x328) => 0
NtCancelIoFileEx(hFile=0x32c, IoStatusBlockIn=0x12cfaca94c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x32c) => 0
NtClose(Handle=0x330) => 0
NtCancelIoFileEx(hFile=0x334, IoStatusBlockIn=0x12cfaca94e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x334) => 0
NtClose(Handle=0x338) => 0
NtCancelIoFileEx(hFile=0x33c, IoStatusBlockIn=0x12cfaca9500 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x33c) => 0
NtClose(Handle=0x340) => 0
NtCancelIoFileEx(hFile=0x344, IoStatusBlockIn=0x12cfaca9520 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x344) => 0
NtClose(Handle=0x348) => 0
NtCancelIoFileEx(hFile=0x34c, IoStatusBlockIn=0x12cfaca9540 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x34c) => 0
NtClose(Handle=0x350) => 0
NtCancelIoFileEx(hFile=0x354, IoStatusBlockIn=0x12cfaca9560 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x354) => 0
NtClose(Handle=0x358) => 0
NtCancelIoFileEx(hFile=0x35c, IoStatusBlockIn=0x12cfaca9580 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x35c) => 0
NtClose(Handle=0x360) => 0
NtCancelIoFileEx(hFile=0x364, IoStatusBlockIn=0x12cfaca95a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x364) => 0
NtClose(Handle=0x368) => 0
NtCancelIoFileEx(hFile=0x36c, IoStatusBlockIn=0x12cfaca95c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x36c) => 0
NtClose(Handle=0x370) => 0
NtCancelIoFileEx(hFile=0x374, IoStatusBlockIn=0x12cfaca95e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x374) => 0
NtClose(Handle=0x378) => 0
NtCancelIoFileEx(hFile=0x37c, IoStatusBlockIn=0x12cfaca9600 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x37c) => 0
NtClose(Handle=0x380) => 0
NtCancelIoFileEx(hFile=0x384, IoStatusBlockIn=0x12cfaca9620 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x384) => 0
NtClose(Handle=0x388) => 0
NtCancelIoFileEx(hFile=0x38c, IoStatusBlockIn=0x12cfaca9640 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x38c) => 0
NtClose(Handle=0x390) => 0
NtCancelIoFileEx(hFile=0x394, IoStatusBlockIn=0x12cfaca9660 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x394) => 0
NtClose(Handle=0x398) => 0
NtCancelIoFileEx(hFile=0x39c, IoStatusBlockIn=0x12cfaca9680 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x39c) => 0
NtClose(Handle=0x3a0) => 0
NtCancelIoFileEx(hFile=0x3a4, IoStatusBlockIn=0x12cfaca96a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3a4) => 0
NtClose(Handle=0x3a8) => 0
NtCancelIoFileEx(hFile=0x3ac, IoStatusBlockIn=0x12cfaca96c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3ac) => 0
NtClose(Handle=0x3b0) => 0
NtCancelIoFileEx(hFile=0x3b4, IoStatusBlockIn=0x12cfaca96e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3b4) => 0
NtClose(Handle=0x3b8) => 0
NtCancelIoFileEx(hFile=0x3bc, IoStatusBlockIn=0x12cfaca9700 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3bc) => 0
NtClose(Handle=0x3c0) => 0
NtCancelIoFileEx(hFile=0x3c4, IoStatusBlockIn=0x12cfaca9720 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3c4) => 0
NtClose(Handle=0x3c8) => 0
NtCancelIoFileEx(hFile=0x3cc, IoStatusBlockIn=0x12cfaca9740 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3cc) => 0
NtClose(Handle=0x3d0) => 0
NtCancelIoFileEx(hFile=0x3d4, IoStatusBlockIn=0x12cfaca9760 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3d4) => 0
NtClose(Handle=0x3d8) => 0
NtCancelIoFileEx(hFile=0x3dc, IoStatusBlockIn=0x12cfaca9780 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3dc) => 0
NtClose(Handle=0x3e0) => 0
NtCancelIoFileEx(hFile=0x3e4, IoStatusBlockIn=0x12cfaca97a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3e4) => 0
NtClose(Handle=0x3e8) => 0
NtCancelIoFileEx(hFile=0x3ec, IoStatusBlockIn=0x12cfaca97c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3ec) => 0
NtClose(Handle=0x3f0) => 0
NtCancelIoFileEx(hFile=0x3f4, IoStatusBlockIn=0x12cfaca97e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3f4) => 0
NtClose(Handle=0x3f8) => 0
NtCancelIoFileEx(hFile=0x3fc, IoStatusBlockIn=0x12cfaca9800 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x3fc) => 0
NtClose(Handle=0x404) => 0
NtCancelIoFileEx(hFile=0x408, IoStatusBlockIn=0x12cfaca9820 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x408) => 0
NtClose(Handle=0x40c) => 0
NtCancelIoFileEx(hFile=0x410, IoStatusBlockIn=0x12cfaca9840 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x410) => 0
NtClose(Handle=0x414) => 0
NtCancelIoFileEx(hFile=0x418, IoStatusBlockIn=0x12cfaca9860 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x418) => 0
NtClose(Handle=0x41c) => 0
NtCancelIoFileEx(hFile=0x420, IoStatusBlockIn=0x12cfaca9880 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x420) => 0
NtClose(Handle=0x424) => 0
NtCancelIoFileEx(hFile=0x428, IoStatusBlockIn=0x12cfaca98a0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x428) => 0
NtClose(Handle=0x42c) => 0
NtCancelIoFileEx(hFile=0x430, IoStatusBlockIn=0x12cfaca98c0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x430) => 0
NtClose(Handle=0x434) => 0
NtCancelIoFileEx(hFile=0x438, IoStatusBlockIn=0x12cfaca98e0 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x438) => 0
NtClose(Handle=0x43c) => 0
NtCancelIoFileEx(hFile=0x440, IoStatusBlockIn=0x12cfaca9900 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x440) => 0
NtClose(Handle=0x444) => 0
NtCancelIoFileEx(hFile=0x448, IoStatusBlockIn=0x12cfaca9920 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x448) => 0
NtClose(Handle=0x44c) => 0
NtCancelIoFileEx(hFile=0x450, IoStatusBlockIn=0x12cfaca9940 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x450) => 0
NtClose(Handle=0x454) => 0
NtCancelIoFileEx(hFile=0x458, IoStatusBlockIn=0x12cfaca9960 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x458) => 0
NtClose(Handle=0x45c) => 0
NtCancelIoFileEx(hFile=0x460, IoStatusBlockIn=0x12cfaca9980 [0x103/0], IoStatusBlock=0x9e614f8a0 [0/0]) => 0
NtClose(Handle=0x460) => 0
NtClose(Handle=0x464) => 0
NtClose(Handle=0xe0) => 0
done: 100 pipes, one GetQueuedCompletionStatus slept 1.99s, 0 completions, 0 bytes
while waiting: kernel counted READ ops +0, OTHER ops +0
NtWriteFile(FileHandle=0xa30, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x9e614e1c0 [0/0x8d], Buffer=0x9e614e2e0, Length=0x8d, ByteOffset=null, Key=null) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", Attributes=0x9e614f390 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x9e614f3d8 [0xe0], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", IoStatusBlock=0x9e614f440 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x9e614f3e0 [0x464], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xe0) => 0
Loaded DLL at 00007FF9BC190000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll
NtMapViewOfSection(SectionHandle=0x464, ProcessHandle=-1, BaseAddress=0x12cfacadc90 [0x00007ff9bc190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x12cfacadba8 [0x00031000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C18D0000 C:\WINDOWS\System32\msvcrt.dll
NtMapViewOfSection(SectionHandle=0x460, ProcessHandle=-1, BaseAddress=0x12cfaca73d0 [0x00007ff9c18d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x12cfaca7328 [0x00148000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryVolumeInformationFile(FileHandle=0x290, IoStatusBlock=0x9e614f130 [0/8], FsInformation=0x9e614f120, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa30, IoStatusBlock=0x9e614f130 [0/8], FsInformation=0x9e614f120, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1e8, IoStatusBlock=0x9e614f130 [0/8], FsInformation=0x9e614f120, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f908 [0x00007ff6cbdaa000], Size=0x9e614f900 [0x1000], NewProtect=4, OldProtect=0x9e614fa40 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x9e614f908 [0x00007ff6cbdaa000], Size=0x9e614f900 [0x1000], NewProtect=2, OldProtect=0x9e614fa40 [4]) => 0
NtQueryWnfStateData(StateName=0x9e614f390 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0x9e614e2e4 [0x58b7], Buffer=0x9e614e338, BufferSize=0x9e614e2e0 [0xfb6]) => 0
Process 12064 exit code: 0
