Process 11932 starting at 00007FF6B95412A0 with command line: ""C:\Program Files\Python314\python.exe" wait_peek_win32.py 100 2"
C:\Program Files\Python314\python.exe
Loaded DLL at 00007FF9C3290000 ntdll.dll
Loaded DLL at 00007FF9C1D20000 C:\WINDOWS\System32\xtajit64se.dll
Loaded DLL at 00007FF9C1380000 C:\WINDOWS\System32\KERNEL32.DLL
NtMapViewOfSection(SectionHandle=0x88, ProcessHandle=-1, BaseAddress=0x18515f2b000 [0x00007ff9c1380000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f29aa8 [0x00169000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BE5D0000 C:\WINDOWS\System32\KERNELBASE.dll
NtMapViewOfSection(SectionHandle=0x8c, ProcessHandle=-1, BaseAddress=0x18515f2b870 [0x00007ff9be5d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f2b7b8 [0x006da000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQuerySystemInformation(SystemInformationClass=0x32 [SystemRangeStartInformation], SystemInformation=0x3b73cde290, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9bec10e80, Length=0x40, ReturnLength=null) => 0
NtCreateSection(SectionHandle=0x3b73cde0a8 [0x90], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x1f, ObjectAttributes=null, SectionSize=0x3b73cde0b8 [65536], Protect=4, Attributes=0x08000000, FileHandle=0) => 0
NtMapViewOfSection(SectionHandle=0x88, ProcessHandle=-1, BaseAddress=0x3b73cde0b0 [0x00007ff31cff0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x3b73cde0f0 [0x00100000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtGetNlsSectionPtr(SectionType=0xe, SectionData=0, ContextData=null, SectionPointer=0x3b73cde268 [0x000001851e650000], SectionSize=null) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x4e4, ContextData=null, SectionPointer=0x3b73cde208 [0x000001851e740000], SectionSize=0x3b73cde210 [0x00011000]) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x1b5, ContextData=null, SectionPointer=0x3b73cde208 [0x000001851e760000], SectionSize=0x3b73cde210 [0x00011000]) => 0
NtCreateFile(FileHandle=0x3b73cde258 [0x88], DesiredAccess=READ_CONTROL|SYNCHRONIZE|0x19f, ObjectAttributes=4:"\Connect", IoStatusBlock=0x3b73cddc90 [0/0x18], AllocationSize=null, FileAttributes=0, ShareAccess=7, CreateDisposition=2, CreateOptions=0x20, EaBuffer=0x18515f2cf80, EaLength=0x54b) => 0
NtDeviceIoControlFile(FileHandle=0x88, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde220 [0/0], IoControlCode=0x00500023, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x3b73cde210, OutputBufferLength=8) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x31 [ProcessOwnerInformation], ProcessInformation=0x3b73cde218, Length=8) => 0
NtDeviceIoControlFile(FileHandle=0x88, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde0c0, IoControlCode=0x00500016, InputBuffer=0x3b73cde0d0, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc00700bb [187 'The specified system semaphore name was not found.']
NtOpenProcessToken(ProcessHandle=-1, DesiredAccess=0x8, TokenHandle=0x3b73cde0e0 [0x90]) => 0
NtQueryInformationToken(TokenHandle=0x90, TokenInformationClass=0xc [TokenSessionId], TokenInformation=0x3b73cdda68, Length=4, ReturnLength=0x3b73cdda6c [4]) => 0
NtQueryInformationToken(TokenHandle=0x90, TokenInformationClass=0x1d [TokenIsAppContainer], TokenInformation=0x3b73cdda90, Length=4, ReturnLength=0x3b73cdda6c [4]) => 0
NtQueryInformationToken(TokenHandle=0x90, TokenInformationClass=0x2a [TokenPrivateNameSpace], TokenInformation=0x3b73cdda28, Length=4, ReturnLength=0x3b73cdda6c [4]) => 0
NtOpenDirectoryObject(DirectoryHandle=0x3b73cdda20 [0x98], DesiredAccess=0xf, ObjectAttributes="\BaseNamedObjects") => 0
NtQueryInformationToken(TokenHandle=0x90, TokenInformationClass=0x2c [TokenBnoIsolation], TokenInformation=0x3b73cddd38, Length=0x120, ReturnLength=0x3b73cdda6c [0x10]) => 0
NtClose(Handle=0x90) => 0
NtCreateMutant(MutantHandle=0x3b73cde128 [0x90], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02", InitialOwner=false) => 0
NtWaitForSingleObject(Handle=0x90, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0x3b73cdde78, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateSemaphore(SemaphoreHandle=0x3b73cdde18 [0xa0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0", InitialCount=0x457cb540, MaxCount=0x457cb540) => 0
NtCreateSemaphore(SemaphoreHandle=0x3b73cdde10 [0xa4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0h", InitialCount=0xc2, MaxCount=0xc2) => 0
NtReleaseMutant(MutantHandle=0x90, PreviousCount=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9c14d70c0, Length=0x40, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0x3b73cdeb58 [0xb4], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\FileSystem\") => 0
NtQueryValueKey(KeyHandle=0xb4, ValueName="LongPathsEnabled", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdeb90, Length=0x14, ResultLength=0x3b73cdeb50 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xb4, ValueName="LPGO", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdeb90, Length=0x14, ResultLength=0x3b73cdeb50) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xb4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", Attributes=0x3b73cde530 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cde578 [0xbc], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", IoStatusBlock=0x3b73cde5e0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cde580 [0xc0], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xbc) => 0
Loaded DLL at 00007FF9BE160000 C:\WINDOWS\SYSTEM32\apphelp.dll
NtMapViewOfSection(SectionHandle=0xc0, ProcessHandle=-1, BaseAddress=0x18515f2b4d0 [0x00007ff9be160000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f2b3f8 [0x00106000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtOpenKey(KeyHandle=0x3b73cddec8 [0xc8], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xc8, ValueName="LogFlags", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cddea0, Length=0x14, ResultLength=0x3b73cdde90) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc8) => 0
NtOpenKey(KeyHandle=0x3b73cddec8, DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\OSDATA\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cde128 [0xd0], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xd0, ValueName="ShowDebugInfo", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cde100, Length=0x14, ResultLength=0x3b73cde0f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd0) => 0
NtOpenFile(FileHandle=0x3b73cde4a8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0x3b73cde520 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cde4b8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f32fa0, SecurityDescriptorLength=0x20, ReturnLength=0x3b73cde4b8 [0x20]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x3b73cde4a8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\ntdll.dll", IoStatusBlock=0x3b73cde520 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cde4b8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f333c0, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cde4b8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x3b73cde4a8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\xtajit64se.dll", IoStatusBlock=0x3b73cde520 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cde4b8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f333c0, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cde4b8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x3b73cde4a8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNEL32.DLL", IoStatusBlock=0x3b73cde520 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cde4b8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f333c0, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cde4b8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenFile(FileHandle=0x3b73cde4a8 [0xd4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNELBASE.dll", IoStatusBlock=0x3b73cde520 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cde4b8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f333c0, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cde4b8 [0x34]) => 0
NtClose(Handle=0xd4) => 0
NtOpenKey(KeyHandle=0x3b73cddf88 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="StagedDelete_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x3b73cddfc0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenKey(KeyHandle=0x3b73cddf88 [0xd8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x3b73cddfc0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryValueKey(KeyHandle=0xd8, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f34700, Length=0x48, ResultLength=0x3b73cddfc0 [0x46]) => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="MergeVer_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cddf60, Length=0x14, ResultLength=0x3b73cddf50 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="MergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cddf60, Length=0x14, ResultLength=0x3b73cddf50 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="MinMergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cddf60, Length=0x14, ResultLength=0x3b73cddf50 [0x10]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD2B3C9708CF2D.sysmain.sdb", IoStatusBlock=0x3b73cddee0 [0/0x48], FileInformation=0x3b73cddf60, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\sysmain.sdb", IoStatusBlock=0x3b73cddee0 [0/0x48], FileInformation=0x3b73cddf60, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtOpenKey(KeyHandle=0x3b73cdde98 [0xd4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdde70, Length=0x14, ResultLength=0x3b73cdde60) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd4) => 0
NtOpenKey(KeyHandle=0x3b73cddee8 [0xdc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xdc, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f34890, Length=0x28, ResultLength=0x3b73cddf84 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xdc, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f34890, Length=0x28, ResultLength=0x3b73cddf84 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xdc, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x18515f348f0, Length=0x230, ResultLength=0x3b73cddf84 [0x74]) => 0
NtClose(Handle=0xdc) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\apppatch\MergeSdbFilesSource\sysMerge.sdb", IoStatusBlock=0x3b73cddee0 [0/0x48], FileInformation=0x3b73cddf60, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtClose(Handle=0xd8) => 0
NtCreateFile(FileHandle=0x3b73cde070 [0xdc], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD2B3C9708CF2D.sysmain.sdb", IoStatusBlock=0x3b73cde080 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryInformationFile(FileHandle=0xdc, IoStatusBlock=0x3b73cde110 [0/0x18], FileInformation=0x3b73cde120, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtQueryInformationFile(FileHandle=0xdc, IoStatusBlock=0x3b73cde100 [0/0x18], FileInformation=0x3b73cde110, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtCreateSection(SectionHandle=0x3b73cde0b0 [0xd8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0xdc) => 0
NtMapViewOfSection(SectionHandle=0xd8, ProcessHandle=-1, BaseAddress=0x3b73cde0b8 [0x00007ff31cbe0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x3b73cde0c0 [0x0040d000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtOpenKey(KeyHandle=0x3b73cde068 [0xd4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cde040, Length=0x14, ResultLength=0x3b73cde030) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd4) => 0
NtOpenKey(KeyHandle=0x3b73cde0b8 [0xd0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xd0, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f34780, Length=0x28, ResultLength=0x3b73cde154 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd0, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f34780, Length=0x28, ResultLength=0x3b73cde154 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xd0, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x18515f34930, Length=0x230, ResultLength=0x3b73cde154 [0x74]) => 0
NtClose(Handle=0xd0) => 0
NtOpenKey(KeyHandle=0x3b73cddfb8 [0xd0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd0, ValueName="StagedDelete_sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x3b73cddff0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd0) => 0
NtOpenKey(KeyHandle=0x3b73cddfb8 [0xd0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xd0, ValueName="sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0x3b73cddff0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd0) => 0
NtOpenProcess(ProcessHandle=0x3b73cdde40 [0xd0], DesiredAccess=0x1000, ObjectAttributes=null, ClientId=0x3b73cdde48 [0x2e9c/0]) => 0
NtOpenProcessToken(ProcessHandle=0xd0, DesiredAccess=0x8, TokenHandle=0x3b73cdde10 [0xd4]) => 0
NtQueryInformationToken(TokenHandle=0xd4, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=null, Length=0, ReturnLength=0x3b73cddd80) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryInformationToken(TokenHandle=0xd4, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=0x18515f34a60, Length=0xe8, ReturnLength=0x3b73cddd80 [0xe8]) => 0
NtClose(Handle=0xd4) => 0
NtCreateFile(FileHandle=0x3b73cddc70 [0xd4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0x3b73cddc00 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0x3b73cddb68 [0xe0], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x18515f34d80, Length=0x208, ResultLength=0x3b73cddb60) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtApphelpCacheControl(ServiceClass=0, ServiceData="") => 0
NtClose(Handle=0xd4) => 0
NtCreateFile(FileHandle=0x3b73cddaa8 [0xd4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0x3b73cdda10 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0x3b73cdd978 [0xe4], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xe4, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x18515f34d80, Length=0x208, ResultLength=0x3b73cdd970) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe4) => 0
NtApphelpCacheControl(ServiceClass=2, ServiceData="") => 0
NtClose(Handle=0xd4) => 0
NtClose(Handle=0xd0) => 0
NtOpenMutant(MutantHandle=0x3b73cde228, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0x98:"Local\ShimViewer") => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xdc) => 0
NtClose(Handle=0xd8) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x7ff31cbe0000) => 0
Loaded DLL at 00007FF9BEE00000 C:\WINDOWS\System32\ucrtbase.dll
NtMapViewOfSection(SectionHandle=0x100, ProcessHandle=-1, BaseAddress=0x18515f33e60 [0x00007ff9bee00000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f33d88 [0x00229000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", Attributes=0x3b73cde880 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cde9b8 [0x104], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0x3b73cdea20 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cde9c0 [0xd4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x104) => 0
Loaded DLL at 00007FF915490000 C:\Program Files\Python314\python314.dll
NtMapViewOfSection(SectionHandle=0xd4, ProcessHandle=-1, BaseAddress=0x18515f33740 [0x00007ff915490000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f33688 [0x006f6000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x19 [TokenIntegrityLevel], TokenInformation=0x3b73cdd720, Length=0x58, ReturnLength=0x3b73cdd710 [0x1c]) => 0
NtOpenKey(KeyHandle=0x3b73cdd6b8 [0xd8], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide") => 0
NtQueryValueKey(KeyHandle=0xd8, ValueName="PreferExternalManifest", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdd700, Length=0x14, ResultLength=0x3b73cdd6b0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd8) => 0
NtOpenFile(FileHandle=0x3b73cdd848 [0x108], DesiredAccess=FILE_GENERIC_READ, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0x3b73cdd8e0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtQueryVolumeInformationFile(FileHandle=0x108, IoStatusBlock=0x3b73cdd790 [0/8], FsInformation=0x3b73cdd780, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtClose(Handle=0x108) => 0
Loaded DLL at 00007FF9C0F80000 C:\WINDOWS\System32\WS2_32.dll
NtMapViewOfSection(SectionHandle=0x10c, ProcessHandle=-1, BaseAddress=0x18515f39e50 [0x00007ff9c0f80000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f39da8 [0x000d9000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1A20000 C:\WINDOWS\System32\RPCRT4.dll
NtMapViewOfSection(SectionHandle=0xe4, ProcessHandle=-1, BaseAddress=0x18515f36570 [0x00007ff9c1a20000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f364c8 [0x00203000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0120000 C:\WINDOWS\System32\ADVAPI32.dll
NtMapViewOfSection(SectionHandle=0x10c, ProcessHandle=-1, BaseAddress=0x18515f36f70 [0x00007ff9c0120000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f36eb8 [0x0014d000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C18D0000 C:\WINDOWS\System32\msvcrt.dll
NtMapViewOfSection(SectionHandle=0x108, ProcessHandle=-1, BaseAddress=0x18515f37630 [0x00007ff9c18d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f37588 [0x00148000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1510000 C:\WINDOWS\System32\sechost.dll
NtMapViewOfSection(SectionHandle=0x108, ProcessHandle=-1, BaseAddress=0x18515f3a380 [0x00007ff9c1510000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f3a2a8 [0x00126000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", Attributes=0x3b73cde880 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cde9b8 [0x104], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", IoStatusBlock=0x3b73cdea20 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cde9c0 [0xe4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x104) => 0
Loaded DLL at 00007FF9849C0000 C:\Program Files\Python314\VCRUNTIME140.dll
NtMapViewOfSection(SectionHandle=0xe4, ProcessHandle=-1, BaseAddress=0x18515f33ac0 [0x00007ff9849c0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f33a08 [0x0002c000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VERSION.dll", Attributes=0x3b73cde880) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", Attributes=0x3b73cde880 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cde9b8 [0x104], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", IoStatusBlock=0x3b73cdea20 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cde9c0 [0xd8], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x104) => 0
Loaded DLL at 00007FF99FE40000 C:\WINDOWS\SYSTEM32\VERSION.dll
NtMapViewOfSection(SectionHandle=0xd8, ProcessHandle=-1, BaseAddress=0x18515f39ae0 [0x00007ff99fe40000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f34878 [0x00016000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\bcrypt.dll", Attributes=0x3b73cde880) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", Attributes=0x3b73cde880 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cde9b8 [0xe8], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", IoStatusBlock=0x3b73cdea20 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cde9c0 [0xe4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xe8) => 0
Loaded DLL at 00007FF9BE440000 C:\WINDOWS\SYSTEM32\bcrypt.dll
NtMapViewOfSection(SectionHandle=0xe4, ProcessHandle=-1, BaseAddress=0x18515f36bf0 [0x00007ff9be440000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f36b48 [0x0004d000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", Attributes=0x3b73cde880 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdea68 [0x104], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\msvcrt.dll", IoStatusBlock=0x3b73cdeae0 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdea78) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdea78 [0x34]) => 0
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0x3b73cdea98 [0xd8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\VERSION.dll", IoStatusBlock=0x3b73cdeb10 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdeaa8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdeaa8 [0x34]) => 0
NtClose(Handle=0xd8) => 0
NtOpenFile(FileHandle=0x3b73cdea68 [0x104], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\ucrtbase.dll", IoStatusBlock=0x3b73cdeae0 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdea78) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdea78 [0x34]) => 0
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0x3b73cdea68 [0xdc], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\RPCRT4.dll", IoStatusBlock=0x3b73cdeae0 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdea78) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdea78 [0x34]) => 0
NtClose(Handle=0xdc) => 0
NtOpenFile(FileHandle=0x3b73cdea98 [0x104], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\WS2_32.dll", IoStatusBlock=0x3b73cdeb10 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdeaa8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdeaa8 [0x34]) => 0
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0x3b73cdea68 [0xdc], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\sechost.dll", IoStatusBlock=0x3b73cdeae0 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdea78) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdea78 [0x34]) => 0
NtClose(Handle=0xdc) => 0
NtOpenFile(FileHandle=0x3b73cdea98 [0xdc], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\bcrypt.dll", IoStatusBlock=0x3b73cdeb10 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdeaa8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xdc, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdeaa8 [0x34]) => 0
NtClose(Handle=0xdc) => 0
NtOpenFile(FileHandle=0x3b73cdea98 [0x104], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\ADVAPI32.dll", IoStatusBlock=0x3b73cdeb10 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdeaa8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0x104, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa20, SecurityDescriptorLength=0x34, ReturnLength=0x3b73cdeaa8 [0x34]) => 0
NtClose(Handle=0x104) => 0
NtOpenFile(FileHandle=0x3b73cdea98 [0xd8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140.dll", IoStatusBlock=0x3b73cdeb10 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdeaa8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xd8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa30, SecurityDescriptorLength=0x20, ReturnLength=0x3b73cdeaa8 [0x20]) => 0
NtClose(Handle=0xd8) => 0
NtOpenFile(FileHandle=0x3b73cdeac8 [0xe8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Program Files\Python314\python314.dll", IoStatusBlock=0x3b73cdeb40 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xe8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0x3b73cdead8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xe8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x18515f3aa30, SecurityDescriptorLength=0x20, ReturnLength=0x3b73cdead8 [0x20]) => 0
NtClose(Handle=0xe8) => 0
Initial breakpoint
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cde840 [0/8], FsInformation=0x3b73cde830, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cde840 [0/8], FsInformation=0x3b73cde830, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cde840 [0/8], FsInformation=0x3b73cde830, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtOpenKey(KeyHandle=0x3b73cddb60 [0xd4], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\Sorting\Versions") => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x3b73cddb80, Length=0x214, ResultLength=0x3b73cdddc0 [0x2a]) => 0
NtQueryValueKey(KeyHandle=0xd4, ValueName="000605xx", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x3b73cdd580, Length=0x214, ResultLength=0x3b73cdd7b0 [0x42]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cde8a8 [0x00007ff9bf020000], Size=0x3b73cde8a0 [0x1000], NewProtect=2, OldProtect=0x3b73cde8e0 [8]) => 0
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cde870 [0/8], FsInformation=0x3b73cde860, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cde870 [0/8], FsInformation=0x3b73cde860, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cde870 [0/8], FsInformation=0x3b73cde860, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cddae8 [0x00007ff9bf020000], Size=0x3b73cddae0 [0x1000], NewProtect=4, OldProtect=0x3b73cddb20 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cddae8 [0x00007ff9bf020000], Size=0x3b73cddae0 [0x1000], NewProtect=2, OldProtect=0x3b73cddb20 [4]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x56 [ProcessEnclaveInformation], ProcessInformation=0x3b73cde8a0, Length=0xb0, ReturnLength=null) => 0xc0000003 [87 'The parameter is incorrect.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0x3b73cde860, Length=0x40, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x2b [ProcessImageFileNameWin32], ProcessInformation=0x18515f41280, Length=0x218, ReturnLength=null) => 0
NtCreateEvent(EventHandle=0x3b73cde7c8 [0xe8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtOpenFile(FileHandle=0x7ff9be4861f0 [0xd8], DesiredAccess=SYNCHRONIZE|0x3, ObjectAttributes="\Device\KsecDD", IoStatusBlock=0x3b73cde760 [0/0], ShareAccess=7, OpenOptions=0x20) => 0
NtDeviceIoControlFile(FileHandle=0xd8, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde7c0 [0/0], IoControlCode=0x00390400, InputBuffer=0x3b73cde880, InputBufferLength=0x68, OutputBuffer=0x3b73cde7d0, OutputBufferLength=8) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x3b73cde650, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0x3b73cde640, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0x3b73cde5d0, Length=0x40, ReturnLength=null) => 0
NtTestAlert() => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=0 [MemoryBasicInformation], MemoryInformation=0x3b73cdf940, Length=0x30, ReturnLength=0x3b73cdf930 [0x30]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=3 [MemoryRegionInformation], MemoryInformation=0x3b73cdf970, Length=0x30, ReturnLength=null) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff6b9541970, MemoryInformationClass=2 [MemoryMappedFilenameInformation], MemoryInformation=0x3b73cdf9d8, Length=0x21a, ReturnLength=null) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=4, OldProtect=0x3b73cdf7b0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdf778 [0x00007ff9bf020000], Size=0x3b73cdf770 [0x1000], NewProtect=2, OldProtect=0x3b73cdf7b0 [4]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0xa [TokenStatistics], TokenInformation=0x3b73cdeb90, Length=0x38, ReturnLength=0x3b73cdeb80 [0x38]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=1 [TokenUser], TokenInformation=0x18515f499f0, Length=0x54, ReturnLength=0x3b73cdeb80 [0x2c]) => 0
NtOpenKey(KeyHandle=0x3b73cdebb0 [0x14c], DesiredAccess=KEY_READ, ObjectAttributes=0xdc:"Control Panel\International") => 0
NtClose(Handle=0xdc) => 0
NtCreateEvent(EventHandle=0x3b73cdeb68 [0xdc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x14c, Event=0xdc, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec11b90 [0/0], CompletionFilter=0x10000005, WatchTree=true, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtQueryMultipleValueKey(KeyHandle=0x14c, ListOfValuesToQuery=0x18515f4a0a0, NumberOfItems=0x1e, ValueInformation=0x18515f499f0, Length=0x3b73cdeb34 [0x108], ReturnLength=0x3b73cdeb30 [0x108]) => 0
NtQueryValueKey(KeyHandle=0x14c, ValueName="sCurrency", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f499f0, Length=0xb6, ResultLength=0x3b73cdeb30 [0x10]) => 0
NtQueryValueKey(KeyHandle=0x14c, ValueName="iCalendarType", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x18515f499f0, Length=0xb6, ResultLength=0x3b73cdeb30 [0x10]) => 0
NtOpenKey(KeyHandle=0x3b73cde9e8, DesiredAccess=0x1, ObjectAttributes=0x14c:"invalid string") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cde228 [0x150], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\CustomLocale") => 0
NtQueryValueKey(KeyHandle=0x150, ValueName="en-US", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x3b73cde8e8, Length=0x214, ResultLength=0x3b73cde220) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x150) => 0
NtOpenKey(KeyHandle=0x3b73cde228 [0x150], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\ExtendedLocale") => 0
NtQueryValueKey(KeyHandle=0x150, ValueName="en-US", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x3b73cde8e8, Length=0x214, ResultLength=0x3b73cde220) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x150) => 0
NtWaitForSingleObject(Handle=0xdc, Alertable=false, Timeout=0x3b73cdeaa8 [0]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtWaitForSingleObject(Handle=0xdc, Alertable=false, Timeout=0x3b73cdeaa8 [0]) => 0x102 [1460 'This operation returned because the timeout period expired.']
NtDeviceIoControlFile(FileHandle=0xd8, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf300 [0/0xd8], IoControlCode=0x00390400, InputBuffer=0x3b73cdf408, InputBufferLength=0x30, OutputBuffer=0x18515f4aa60, OutputBufferLength=0x180) => 0
NtDeviceIoControlFile(FileHandle=0xd8, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cded10 [0/0xd8], IoControlCode=0x00390400, InputBuffer=0x3b73cdee28, InputBufferLength=0x38, OutputBuffer=0x18515f4ac10, OutputBufferLength=0x180) => 0
Loaded DLL at 00007FF9BF190000 C:\WINDOWS\System32\bcryptprimitives.dll
NtMapViewOfSection(SectionHandle=0x150, ProcessHandle=-1, BaseAddress=0x18515f4b450 [0x00007ff9bf190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f4b368 [0x000ff000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x56 [ProcessEnclaveInformation], ProcessInformation=0x3b73cde900, Length=0xb0, ReturnLength=null) => 0xc0000003 [87 'The parameter is incorrect.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0x3b73cde990, Length=0x40, ReturnLength=null) => 0
NtOpenFile(FileHandle=0x3b73cde7b0 [0x150], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\Device\CNG", IoStatusBlock=0x3b73cde7d0 [0/0], ShareAccess=7, OpenOptions=0x20) => 0
NtDeviceIoControlFile(FileHandle=0x150, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde790 [0/0x30], IoControlCode=0x00390008, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x3b73cde870, OutputBufferLength=0x30) => 0
NtOpenKeyEx(KeyHandle=0x3b73cde6d8 [0xe4], DesiredAccess=MAXIMUM_ALLOWED, ObjectAttributes="\REGISTRY\MACHINE", OpenOptions=0) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cde620, Length=4, ResultLength=0x3b73cde624 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cde698 [0x15c], DesiredAccess=0x1, ObjectAttributes=0xe4:"System\CurrentControlset\Control\Lsa", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x15c, ValueName="LsaPid", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cde700, Length=0x10, ResultLength=0x3b73cde6c0 [0x10]) => 0
NtClose(Handle=0x15c) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0x3b73cdf490 [0x000001851ef00000], ZeroBits=0, pSize=0x3b73cdf498 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0x3b73cdf390 [0x000001851f000000], ZeroBits=0, pSize=0x3b73cdf398 [0x4000], flAllocationType=0x3000, flProtect=4) => 0
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\pyvenv.cfg", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\pyvenv.cfg", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0x3b73cde8f8 [0xe0], DesiredAccess=SYNCHRONIZE|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python.exe", IoStatusBlock=0x3b73cde930 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x4020, EaBuffer=null, EaLength=0) => 0
NtQueryObject(ObjectHandle=0xe0, ObjectInformationClass=1 [ObjectNameInformation], ObjectInformation=0x18516005a80, Length=0x218, ReturnLength=0x3b73cde9d0 [0x86]) => 0
NtQueryInformationFile(FileHandle=0xe0, IoStatusBlock=0x3b73cde9d0 [0/0x4a], FileInformation=0x18516006340, Length=0x210, FileInformationClass=9 [FileNameInformation]) => 0
NtCreateFile(FileHandle=0x3b73cde808 [0x15c], DesiredAccess=SYNCHRONIZE|0x80, ObjectAttributes="\??\MountPointManager", IoStatusBlock=0x3b73cde840 [0/0], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtDeviceIoControlFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde970 [0/0xc], IoControlCode=0x006d0030, InputBuffer=0x18516006580, InputBufferLength=0x32, OutputBuffer=0x185160065f8, OutputBufferLength=0x210) => 0
NtClose(Handle=0x15c) => 0
NtQueryInformationFile(FileHandle=0xe0, IoStatusBlock=0x3b73cde9d0 [0/0x4a], FileInformation=0x18516006840, Length=0x210, FileInformationClass=0x30 [FileNormalizedNameInformation]) => 0
NtClose(Handle=0xe0) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python.exe", Attributes=0x3b73cdea00 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python314._pth", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python._pth", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\python._pth", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateFile(FileHandle=0x3b73cde968, DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\pybuilddir.txt", IoStatusBlock=0x3b73cde9a0, AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", Attributes=0x3b73cdec60) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\os.py", Attributes=0x3b73cde3d0 [ARCHIVE]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", Attributes=0x3b73cdec60 [DIRECTORY]) => 0
NtQueryKey(KeyHandle=0xe0, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cde9b0, Length=4, ResultLength=0x3b73cde9b4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdea28, DesiredAccess=KEY_READ, ObjectAttributes=0xe0:"SOFTWARE\Python\PythonCore\3.14\PythonPath", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdea20, DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\machine") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdea20, DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\user") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenFile(FileHandle=0x3b73cddb00 [0x160], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\System32\en-US\KERNELBASE.dll.mui", IoStatusBlock=0x3b73cddb10 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cddb20 [0x15c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x160) => 0
NtMapViewOfSection(SectionHandle=0x15c, ProcessHandle=-1, BaseAddress=0x3b73cddb28 [0x000001851f0e0000], ZeroBits=0, CommitSize=0, SectionOffset=0x3b73cddb80 [0], ViewSize=0x3b73cddb30 [0x00153000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdea90, Length=4, ResultLength=0x3b73cdea94 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdeb08 [0x164], DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"SOFTWARE\Python\PythonCore\3.14\PythonPath", OpenOptions=0) => 0
NtEnumerateKey(KeyHandle=0x164, Index=0, KeyInformationClass=0 [KeyBasicInformation], KeyInformation=0x3b73cde828, Length=0x120, ResultLength=0x3b73cde800) => 0x8000001a [259 'No more data is available.']
NtClose(Handle=0x164) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0x3b73cdd020 [0x000001851f340000], ZeroBits=0, pSize=0x3b73cdd028 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtQuerySystemInformation(SystemInformationClass=0x2c [SystemCurrentTimeZoneInformation], SystemInformation=0x3b73cdcbb8, Length=0xac, ReturnLength=null) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", Attributes=0x3b73cdc180 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0x3b73cdc328 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|GENERIC_EXECUTE|0x80, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", IoStatusBlock=0x3b73cdc360 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtCreateSection(SectionHandle=0x3b73cdc4e0 [0x164], DesiredAccess=0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x11000000, FileHandle=0x15c) => 0
NtMapViewOfSection(SectionHandle=0x164, ProcessHandle=-1, BaseAddress=0x3b73cdc4d8 [0x000001851f010000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x3b73cdc4e8 [0x3000], InheritDisposition=1 [ViewShare], AllocationType=0x00040000, Protect=2) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtClose(Handle=0x164) => 0
NtClose(Handle=0x15c) => 0
NtOpenFile(FileHandle=0x3b73cdb740 [0x15c], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\en-US\tzres.dll.mui", IoStatusBlock=0x3b73cdb750 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdb760 [0x164], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x15c) => 0
NtMapViewOfSection(SectionHandle=0x164, ProcessHandle=-1, BaseAddress=0x3b73cdb768 [0x000001851f020000], ZeroBits=0, CommitSize=0, SectionOffset=0x3b73cdb7c0 [0], ViewSize=0x3b73cdb770 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x1851f010000) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", Attributes=0x3b73cdc180 [ARCHIVE]) => 0
NtCreateFile(FileHandle=0x3b73cdc328 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|GENERIC_EXECUTE|0x80, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\tzres.dll", IoStatusBlock=0x3b73cdc360 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtCreateSection(SectionHandle=0x3b73cdc4e0 [0x168], DesiredAccess=0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x11000000, FileHandle=0x15c) => 0
NtMapViewOfSection(SectionHandle=0x168, ProcessHandle=-1, BaseAddress=0x3b73cdc4d8 [0x000001851f010000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x3b73cdc4e8 [0x3000], InheritDisposition=1 [ViewShare], AllocationType=0x00040000, Protect=2) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtClose(Handle=0x168) => 0
NtClose(Handle=0x15c) => 0
NtOpenFile(FileHandle=0x3b73cdb740 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\en-US\tzres.dll.mui", IoStatusBlock=0x3b73cdb750 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdb760 [0x15c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0x164) => 0
NtMapViewOfSection(SectionHandle=0x15c, ProcessHandle=-1, BaseAddress=0x3b73cdb768 [0x000001851f020000], ZeroBits=0, CommitSize=0, SectionOffset=0x3b73cdb7c0 [0], ViewSize=0x3b73cdb770 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0, Protect=2) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x1851f010000) => 0
NtQuerySystemInformation(SystemInformationClass=0x2c [SystemCurrentTimeZoneInformation], SystemInformation=0x3b73cdce58, Length=0xac, ReturnLength=null) => 0
NtCreateTimer2(TimerHandle=0x3b73cdcfa0 [0x164], Unknown1=null, ObjectAttributes=null, Attributes=4, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3) => 0
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", IoStatusBlock=0x3b73cdd9d0, FileInformation=0x3b73cddb40, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cddab0 [0/0x68], FileInformation=0x3b73cddc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\python314.zip", IoStatusBlock=0x3b73cde570, FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cddab0 [0/0x68], FileInformation=0x3b73cddc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cde100 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\DLLs\", IoStatusBlock=0x3b73cde170 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde170 [0/0x60], FileInformation=0x3b73cde1b0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde450 [0/0xe76], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde450 [0/0xdfc], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde450 [0/0xc00], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde450, FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cddab0 [0/0x68], FileInformation=0x3b73cddc20, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cde1e0 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\", IoStatusBlock=0x3b73cde250 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde250 [0/0x60], FileInformation=0x3b73cde290, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe9c], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe58], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe8a], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe0a], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe62], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0xe5a], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530 [0/0x1dc], FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde530, FileInformation=0x1851601df20, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.cp314-win_amd64.pyd", IoStatusBlock=0x3b73cde570, FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.pyd", IoStatusBlock=0x3b73cde570, FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.py", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__init__.py", IoStatusBlock=0x3b73cde570 [0/0x68], FileInformation=0x3b73cde6e0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cddee8 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\__init__.cpython-314.pyc", IoStatusBlock=0x3b73cddf20 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde060 [0/8], FsInformation=0x3b73cde050, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde0e0 [0/8], FsInformation=0x3b73cde0d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde010 [0/0x12], FsInformation=0x3b73cde020, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde010, FileInformation=0x3b73cde040, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde0e0 [0/0x28], FileInformation=0x3b73cde1f8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cde0e0 [0/0x18], FileInformation=0x3b73cde1e0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cddf50 [0/8], FileInformation=0x3b73cddf40, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cddf50 [0/0], FileInformation=0x3b73cddf40, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde520 [0/0x1a5d], Buffer=0x1851f2768f0, Length=0x1a5e, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde520, Buffer=0x1851f27834d, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cdb5a0 [0/0x68], FileInformation=0x3b73cdb710, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cdc060 [0/0x68], FileInformation=0x3b73cdc1d0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cdc060 [0/0x68], FileInformation=0x3b73cdc1d0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdbcd0 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\", IoStatusBlock=0x3b73cdbd40 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdbd40 [0/0x60], FileInformation=0x3b73cdbd80, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020 [0/0xe26], FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020 [0/0xdfa], FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020 [0/0xe0a], FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020 [0/0xe18], FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020 [0/0xec], FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc020, FileInformation=0x1851f25f640, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\aliases.py", IoStatusBlock=0x3b73cdc060 [0/0x68], FileInformation=0x3b73cdc1d0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\aliases.py", IoStatusBlock=0x3b73cdc060 [0/0x68], FileInformation=0x3b73cdc1d0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdbab8 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\aliases.cpython-314.pyc", IoStatusBlock=0x3b73cdbaf0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbc30 [0/8], FsInformation=0x3b73cdbc20, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbcb0 [0/8], FsInformation=0x3b73cdbca0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbbe0 [0/0x12], FsInformation=0x3b73cdbbf0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbbe0, FileInformation=0x3b73cdbc10, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbcb0 [0/0x28], FileInformation=0x3b73cdbdc8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbcb0 [0/0x18], FileInformation=0x3b73cdbdb0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbb20 [0/8], FileInformation=0x3b73cdbb10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdbb20 [0/0], FileInformation=0x3b73cdbb10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc0f0 [0/0x32b2], Buffer=0x1851f2836f0, Length=0x32b3, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc0f0, Buffer=0x1851f2869a2, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cdcd30 [0/0x68], FileInformation=0x3b73cdcea0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\_win_cp_codecs.py", IoStatusBlock=0x3b73cdcd30 [0/0x68], FileInformation=0x3b73cdcea0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\_win_cp_codecs.py", IoStatusBlock=0x3b73cdcd30 [0/0x68], FileInformation=0x3b73cdcea0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdc788 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\_win_cp_codecs.cpython-314.pyc", IoStatusBlock=0x3b73cdc7c0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc900 [0/8], FsInformation=0x3b73cdc8f0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc980 [0/8], FsInformation=0x3b73cdc970, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc8b0 [0/0x12], FsInformation=0x3b73cdc8c0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc8b0, FileInformation=0x3b73cdc8e0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc980 [0/0x28], FileInformation=0x3b73cdca98, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc980 [0/0x18], FileInformation=0x3b73cdca80, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc7f0 [0/8], FileInformation=0x3b73cdc7e0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdc7f0 [0/0], FileInformation=0x3b73cdc7e0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdcdc0 [0/0xdc6], Buffer=0x1851f2836f0, Length=0xdc7, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdcdc0, Buffer=0x1851f2844b6, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cddc60 [0/0x68], FileInformation=0x3b73cdddd0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8.py", IoStatusBlock=0x3b73cddc60 [0/0x68], FileInformation=0x3b73cdddd0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8.py", IoStatusBlock=0x3b73cddc60 [0/0x68], FileInformation=0x3b73cdddd0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdd6b8 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\utf_8.cpython-314.pyc", IoStatusBlock=0x3b73cdd6f0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd830 [0/8], FsInformation=0x3b73cdd820, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8b0 [0/8], FsInformation=0x3b73cdd8a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd7e0 [0/0x12], FsInformation=0x3b73cdd7f0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd7e0, FileInformation=0x3b73cdd810, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8b0 [0/0x28], FileInformation=0x3b73cdd9c8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8b0 [0/0x18], FileInformation=0x3b73cdd9b0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd720 [0/8], FileInformation=0x3b73cdd710, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd720 [0/0], FileInformation=0x3b73cdd710, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddcf0 [0/0x925], Buffer=0x1851f2836f0, Length=0x926, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddcf0, Buffer=0x1851f284015, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x15c) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cddc90 [0/0x68], FileInformation=0x3b73cdde00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\cp1252.py", IoStatusBlock=0x3b73cddc90 [0/0x68], FileInformation=0x3b73cdde00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\cp1252.py", IoStatusBlock=0x3b73cddc90 [0/0x68], FileInformation=0x3b73cdde00, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdd6e8 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\cp1252.cpython-314.pyc", IoStatusBlock=0x3b73cdd720 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd860 [0/8], FsInformation=0x3b73cdd850, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8e0 [0/8], FsInformation=0x3b73cdd8d0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd810 [0/0x12], FsInformation=0x3b73cdd820, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd810, FileInformation=0x3b73cdd840, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8e0 [0/0x28], FileInformation=0x3b73cdd9f8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd8e0 [0/0x18], FileInformation=0x3b73cdd9e0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd750 [0/8], FileInformation=0x3b73cdd740, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x15c, IoStatusBlock=0x3b73cdd750 [0/0], FileInformation=0x3b73cdd740, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddd20 [0/0xd44], Buffer=0x1851f2836f0, Length=0xd45, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x15c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddd20, Buffer=0x1851f284434, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x15c) => 0
NtCreateEvent(EventHandle=0x3b73cdf7e8 [0x15c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cdf760 [0/8], FsInformation=0x3b73cdf750, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x88, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf010, IoControlCode=0x00500016, InputBuffer=0x3b73cdf020, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cdf0b0 [0/8], FsInformation=0x3b73cdf0a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cdef20 [0/8], FileInformation=0x3b73cdef10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x370, IoStatusBlock=0x3b73cdef20, FileInformation=0x3b73cdef10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0xc000000d [87 'The parameter is incorrect.']
NtQueryVolumeInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdf760 [0/8], FsInformation=0x3b73cdf750, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x88, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf010, IoControlCode=0x00500016, InputBuffer=0x3b73cdf020, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdf0b0 [0/8], FsInformation=0x3b73cdf0a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdefe0 [0/0x12], FsInformation=0x3b73cdeff0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdefe0, FileInformation=0x3b73cdf010, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdf0b0 [0/0x28], FileInformation=0x3b73cdf1c8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdf0b0 [0/0x18], FileInformation=0x3b73cdf1b0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtSetInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdef20 [0/0], FileInformation=0x3b73cdef10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0xa74, IoStatusBlock=0x3b73cdf120 [0/0], FileInformation=0x3b73cdf110, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cdf760 [0/8], FsInformation=0x3b73cdf750, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtDeviceIoControlFile(FileHandle=0x88, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf010, IoControlCode=0x00500016, InputBuffer=0x3b73cdf020, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc0000008 [6 'The handle is invalid.']
NtQueryVolumeInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cdf0b0 [0/8], FsInformation=0x3b73cdf0a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cdef20 [0/8], FileInformation=0x3b73cdef10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x1f0, IoStatusBlock=0x3b73cdef20, FileInformation=0x3b73cdef10, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0xc000000d [87 'The parameter is incorrect.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\pyvenv.cfg", IoStatusBlock=0x3b73cdd130, FileInformation=0x3b73cdd2c0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\pyvenv.cfg", IoStatusBlock=0x3b73cdd210, FileInformation=0x3b73cdd3a0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\AppData\Roaming\Python\Python314\site-packages", IoStatusBlock=0x3b73cddaf0, FileInformation=0x3b73cddc80, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc000003a [3 'The system cannot find the path specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cddaf0 [0/0x68], FileInformation=0x3b73cddc80, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdd6c0 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\", IoStatusBlock=0x3b73cdd730 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdd730 [0/0x60], FileInformation=0x3b73cdd770, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdda10 [0/0x882], FileInformation=0x18515fd1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdda10, FileInformation=0x18515fd1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cddbd0 [0/0x68], FileInformation=0x3b73cddd60, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdd7a0 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\", IoStatusBlock=0x3b73cdd810 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdd810 [0/0x60], FileInformation=0x3b73cdd850, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddaf0 [0/0x75c], FileInformation=0x18515fd1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddaf0, FileInformation=0x18515fd1900, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32.pth", IoStatusBlock=0x3b73cdda80 [0/0x68], FileInformation=0x3b73cddbf0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdd4a8 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32.pth", IoStatusBlock=0x3b73cdd4e0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd620 [0/8], FsInformation=0x3b73cdd610, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd6a0 [0/8], FsInformation=0x3b73cdd690, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd5d0 [0/0x12], FsInformation=0x3b73cdd5e0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd5d0, FileInformation=0x3b73cdd600, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd6a0 [0/0x28], FileInformation=0x3b73cdd7b8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd6a0 [0/0x18], FileInformation=0x3b73cdd7a0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd510 [0/8], FileInformation=0x3b73cdd500, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x164, IoStatusBlock=0x3b73cdd510 [0/0], FileInformation=0x3b73cdd500, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddae0 [0/0xb9], Buffer=0x1851f3d59b0, Length=0xba, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddae0, Buffer=0x1851f3d5a69, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings", IoStatusBlock=0x3b73cdbfc0 [0/0x68], FileInformation=0x3b73cdc130, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8_sig.py", IoStatusBlock=0x3b73cdbfc0 [0/0x68], FileInformation=0x3b73cdc130, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\utf_8_sig.py", IoStatusBlock=0x3b73cdbfc0 [0/0x68], FileInformation=0x3b73cdc130, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdba18 [0x168], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\encodings\__pycache__\utf_8_sig.cpython-314.pyc", IoStatusBlock=0x3b73cdba50 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbb90 [0/8], FsInformation=0x3b73cdbb80, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbc10 [0/8], FsInformation=0x3b73cdbc00, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbb40 [0/0x12], FsInformation=0x3b73cdbb50, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbb40, FileInformation=0x3b73cdbb70, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbc10 [0/0x28], FileInformation=0x3b73cdbd28, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbc10 [0/0x18], FileInformation=0x3b73cdbd10, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdba80 [0/8], FileInformation=0x3b73cdba70, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdba80 [0/0], FileInformation=0x3b73cdba70, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc050 [0/0x1c2b], Buffer=0x1851f320d10, Length=0x1c2c, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc050, Buffer=0x1851f32293b, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x168) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cddae0 [0/0x68], FileInformation=0x3b73cddc70, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cddbc0 [0/0x68], FileInformation=0x3b73cddd50, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cddbc0 [0/0x68], FileInformation=0x3b73cddd50, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cdb6f0 [0/0x68], FileInformation=0x3b73cdb860, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdbe20 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\", IoStatusBlock=0x3b73cdbe90 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdbe90 [0/0x60], FileInformation=0x3b73cdbed0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0x882], FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170, FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cdb6f0 [0/0x68], FileInformation=0x3b73cdb860, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdbe20 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\", IoStatusBlock=0x3b73cdbe90 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdbe90 [0/0x60], FileInformation=0x3b73cdbed0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0x75c], FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170, FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cdb6f0 [0/0x68], FileInformation=0x3b73cdb860, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdbe20 [0x164], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\", IoStatusBlock=0x3b73cdbe90 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdbe90 [0/0x60], FileInformation=0x3b73cdbed0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0xe68], FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0x6e4], FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x164, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170, FileInformation=0x1851f302d10, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x164) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cdb6f0 [0/0x68], FileInformation=0x3b73cdb860, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cdbe20 [0x168], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\", IoStatusBlock=0x3b73cdbe90 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdbe90 [0/0x60], FileInformation=0x3b73cdbed0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0xe92], FileInformation=0x1851f303540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170 [0/0x274], FileInformation=0x1851f303540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc170, FileInformation=0x1851f303540, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x168) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywin32_bootstrap.py", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\pywin32_bootstrap.py", IoStatusBlock=0x3b73cdc1b0 [0/0x68], FileInformation=0x3b73cdc320, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdbc08 [0x168], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-314.pyc", IoStatusBlock=0x3b73cdbc40 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbd80 [0/8], FsInformation=0x3b73cdbd70, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbe00 [0/8], FsInformation=0x3b73cdbdf0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbd30 [0/0x12], FsInformation=0x3b73cdbd40, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbd30, FileInformation=0x3b73cdbd60, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbe00 [0/0x28], FileInformation=0x3b73cdbf18, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbe00 [0/0x18], FileInformation=0x3b73cdbf00, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbc70 [0/8], FileInformation=0x3b73cdbc60, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x168, IoStatusBlock=0x3b73cdbc70 [0/0], FileInformation=0x3b73cdbc60, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc240 [0/0x225], Buffer=0x1851f247940, Length=0x226, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdc240, Buffer=0x1851f247b65, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x168) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.cp314-win_amd64.pyd", IoStatusBlock=0x3b73cda970, FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyd", IoStatusBlock=0x3b73cda970, FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.py", IoStatusBlock=0x3b73cda970, FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyw", IoStatusBlock=0x3b73cda970, FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\__init__.pyc", IoStatusBlock=0x3b73cda970, FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cd9eb0 [0/0x68], FileInformation=0x3b73cda020, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cda970 [0/0x68], FileInformation=0x3b73cdaae0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cda5e0 [0x168], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin\", IoStatusBlock=0x3b73cda650 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cda650 [0/0x60], FileInformation=0x3b73cda690, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cda930 [0/0x4aa], FileInformation=0x1851f3045a0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x168, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cda930, FileInformation=0x1851f3045a0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x168) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", IoStatusBlock=0x3b73cdb5f0 [0/0x68], FileInformation=0x3b73cdb780, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32", Attributes=0x3b73cdb730 [DIRECTORY]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pythonwin", IoStatusBlock=0x3b73cdce70 [0/0x68], FileInformation=0x3b73cdcfe0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek_win32.py", IoStatusBlock=0x3b73cded40 [0/0x68], FileInformation=0x3b73cdeeb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cde6b8 [0x16c], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek_win32.py", IoStatusBlock=0x3b73cde6f0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde830 [0/8], FsInformation=0x3b73cde820, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde8b0 [0/8], FsInformation=0x3b73cde8a0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde7e0 [0/0x12], FsInformation=0x3b73cde7f0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde7e0, FileInformation=0x3b73cde810, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde8b0 [0/0x28], FileInformation=0x3b73cde9c8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde8b0 [0/0x18], FileInformation=0x3b73cde9b0, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde720 [0/8], FileInformation=0x3b73cde710, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cde720 [0/0], FileInformation=0x3b73cde710, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdecc0 [0/8], FileInformation=0x3b73cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdecc0 [0/0], FileInformation=0x3b73cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdeba0 [0/0x18], FileInformation=0x3b73cdebb0, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdeba0 [0/0], FileInformation=0x3b73cdeb90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdecc0 [0/8], FileInformation=0x3b73cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdecc0 [0/0], FileInformation=0x3b73cdecb0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdeba0 [0/0], FileInformation=0x3b73cdeb90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x16c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdeb70 [0/0x65d], Buffer=0x1851f440080, Length=0x00020000, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x16c, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdeb70, Buffer=0x1851f4406dd, Length=0x0001f9a3, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtSetInformationFile(FileHandle=0x16c, IoStatusBlock=0x3b73cdeba0 [0/0], FileInformation=0x3b73cdeb90, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtClose(Handle=0x16c) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek_win32.py", IoStatusBlock=0x3b73cdee00 [0/0x68], FileInformation=0x3b73cdef70, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdf7a8 [0x170], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek_win32.py", IoStatusBlock=0x3b73cdf7e0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf920 [0/8], FsInformation=0x3b73cdf910, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryObject(ObjectHandle=0x170, ObjectInformationClass=4 [ObjectHandleFlagInformation], ObjectInformation=0x3b73cdfa50, Length=2, ReturnLength=null) => 0
NtSetInformationObject(Handle=0x170, Class=4 [ObjectHandleFlagInformation], Buffer=0x3b73cdfa50, BufferLength=2) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdfa60 [0/8], FsInformation=0x3b73cdfa50, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf990 [0/0x12], FsInformation=0x3b73cdf9a0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf990, FileInformation=0x3b73cdf9c0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdfa60 [0/0x28], FileInformation=0x3b73cdfb78, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdfa60 [0/0x18], FileInformation=0x3b73cdfb60, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf860 [0/8], FileInformation=0x3b73cdf850, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf860 [0/0], FileInformation=0x3b73cdf850, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf840 [0/0x65d], Buffer=0x1851f300cc0, Length=0x1000, ByteOffset=null, Key=null) => 0
NtQueryInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf880 [0/8], FileInformation=0x3b73cdf870, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf880 [0/0], FileInformation=0x3b73cdf870, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdf880 [0/0], FileInformation=0x3b73cdf870, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf550 [0/0x65d], Buffer=0x1851f300cc0, Length=0x1000, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf380, Buffer=0x1851f300cc0, Length=0x1000, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cdd4f0 [0/0x68], FileInformation=0x3b73cdd660, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtOpenFile(FileHandle=0x3b73cddc20 [0x170], DesiredAccess=SYNCHRONIZE|0x1, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\", IoStatusBlock=0x3b73cddc90 [0/1], ShareAccess=7, OpenOptions=0x4021) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddc90 [0/0x60], FileInformation=0x3b73cddcd0, Length=0x268, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=2, FileName="*") => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddf70 [0/0x8c2], FileInformation=0x1851f300cc0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0
NtQueryDirectoryFileEx(FileHandle=0x170, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cddf70, FileInformation=0x1851f300cc0, Length=0x1000, FileInformationClass=3 [FileBothDirectoryInformation], QueryFlags=0, FileName=null) => 0x80000006 [18 'There are no more files.']
NtClose(Handle=0x170) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", Attributes=0x3b73cdd400 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd448 [0x174], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", IoStatusBlock=0x3b73cdd4b0 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd450 [0x164], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x174) => 0
Loaded DLL at 000001851F010000 C:\Program Files\Python314\python3.DLL
NtMapViewOfSection(SectionHandle=0x164, ProcessHandle=-1, BaseAddress=0x1851f2cfc00 [0x000001851f010000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f24cab8 [0x00010000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0x40000003 [700 '{Image Relocated}

An image file could not be mapped at the address specified in the image file. Local fixups must be performed on this image.']
NtOpenKey(KeyHandle=0x3b73cdc148 [0x170], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide") => 0
NtQueryValueKey(KeyHandle=0x170, ValueName="PreferExternalManifest", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdc190, Length=0x14, ResultLength=0x3b73cdc140) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x170) => 0
NtOpenFile(FileHandle=0x3b73cdc2d8 [0x170], DesiredAccess=FILE_GENERIC_READ, ObjectAttributes="\??\C:\Program Files\Python314\python3.DLL", IoStatusBlock=0x3b73cdc370 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtQueryVolumeInformationFile(FileHandle=0x170, IoStatusBlock=0x3b73cdc220 [0/8], FsInformation=0x3b73cdc210, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtClose(Handle=0x170) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cdddc0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cddde0, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", Attributes=0x3b73cdd860 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd8a8 [0x174], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd", IoStatusBlock=0x3b73cdd910 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd8b0 [0x180], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x174) => 0
Loaded DLL at 00007FF984990000 C:\Program Files\Python314\Lib\site-packages\win32\win32file.pyd
NtMapViewOfSection(SectionHandle=0x180, ProcessHandle=-1, BaseAddress=0x1851f284310 [0x00007ff984990000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f28a1d8 [0x00027000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\MSWSOCK.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\MSWSOCK.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\MSWSOCK.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\MSWSOCK.dll", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd728 [0x170], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\MSWSOCK.dll", IoStatusBlock=0x3b73cdd790 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd730 [0x16c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x170) => 0
Loaded DLL at 00007FF9BCC70000 C:\WINDOWS\SYSTEM32\MSWSOCK.dll
NtMapViewOfSection(SectionHandle=0x16c, ProcessHandle=-1, BaseAddress=0x1851f25b610 [0x00007ff9bcc70000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f4c668 [0x000c3000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\sfc.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\sfc.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\sfc.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc.dll", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd728 [0x164], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc.dll", IoStatusBlock=0x3b73cdd790 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd730 [0x168], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x164) => 0
Loaded DLL at 00007FF9B5CD0000 C:\WINDOWS\SYSTEM32\sfc.dll
NtMapViewOfSection(SectionHandle=0x168, ProcessHandle=-1, BaseAddress=0x18515ffd900 [0x00007ff9b5cd0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f2d15c8 [0x9000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\pywintypes314.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\pywintypes314.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd728 [0x184], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll", IoStatusBlock=0x3b73cdd790 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd730 [0x164], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x184) => 0
Loaded DLL at 00007FF983550000 C:\Program Files\Python314\Lib\site-packages\pywin32_system32\pywintypes314.dll
NtMapViewOfSection(SectionHandle=0x164, ProcessHandle=-1, BaseAddress=0x1851f2d8530 [0x00007ff983550000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f2f78c8 [0x00026000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0CF0000 C:\WINDOWS\System32\USER32.dll
NtMapViewOfSection(SectionHandle=0x174, ProcessHandle=-1, BaseAddress=0x1851f2598f0 [0x00007ff9c0cf0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851601d548 [0x0027c000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF2A0000 C:\WINDOWS\System32\win32u.dll
NtMapViewOfSection(SectionHandle=0x180, ProcessHandle=-1, BaseAddress=0x1851f249800 [0x00007ff9bf2a0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x185160082e8 [0x00061000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C05D0000 C:\WINDOWS\System32\GDI32.dll
NtMapViewOfSection(SectionHandle=0x180, ProcessHandle=-1, BaseAddress=0x1851f2f32b0 [0x00007ff9c05d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f2d2388 [0x00065000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF310000 C:\WINDOWS\System32\gdi32full.dll
NtMapViewOfSection(SectionHandle=0x170, ProcessHandle=-1, BaseAddress=0x1851f2f38d0 [0x00007ff9bf310000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515ffc4a8 [0x001e3000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF030000 C:\WINDOWS\System32\msvcp_win.dll
NtMapViewOfSection(SectionHandle=0x16c, ProcessHandle=-1, BaseAddress=0x1851f2d05d0 [0x00007ff9bf030000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f2d0518 [0x00159000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BF680000 C:\WINDOWS\System32\ole32.dll
NtMapViewOfSection(SectionHandle=0x174, ProcessHandle=-1, BaseAddress=0x1851f30f440 [0x00007ff9bf680000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f30f398 [0x002b0000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C0650000 C:\WINDOWS\System32\combase.dll
NtMapViewOfSection(SectionHandle=0x18c, ProcessHandle=-1, BaseAddress=0x1851f302750 [0x00007ff9c0650000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f3026a8 [0x00699000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C1720000 C:\WINDOWS\System32\OLEAUT32.dll
NtMapViewOfSection(SectionHandle=0x174, ProcessHandle=-1, BaseAddress=0x1851f31fc40 [0x00007ff9c1720000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f31fb88 [0x001a6000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\VCRUNTIME140_1.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140_1.dll", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd728 [0x180], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140_1.dll", IoStatusBlock=0x3b73cdd790 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd730 [0x184], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x180) => 0
Loaded DLL at 00007FF9B5BA0000 C:\Program Files\Python314\VCRUNTIME140_1.dll
NtMapViewOfSection(SectionHandle=0x184, ProcessHandle=-1, BaseAddress=0x1851f258f20 [0x00007ff9b5ba0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f289798 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\VCRUNTIME140_1.dll", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\VCRUNTIME140_1.dll", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\sfc_os.DLL", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\sfc_os.DLL", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\pywin32_system32\sfc_os.DLL", Attributes=0x3b73cdd5f0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc_os.DLL", Attributes=0x3b73cdd5f0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd728 [0x1a4], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\sfc_os.DLL", IoStatusBlock=0x3b73cdd790 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd730 [0x1ac], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x1a4) => 0
Loaded DLL at 00007FF9B5CB0000 C:\WINDOWS\SYSTEM32\sfc_os.DLL
NtMapViewOfSection(SectionHandle=0x1ac, ProcessHandle=-1, BaseAddress=0x1851f316ef0 [0x00007ff9b5cb0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f316e48 [0x00013000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x34 [ProcessMitigationPolicy], ProcessInformation=0x3b73cdd698, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x3b73cdd410, Length=0x40, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x34 [ProcessMitigationPolicy], ProcessInformation=0x3b73cdd148, Length=8, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0x3b73cdd0c8, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdce78, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdce78, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdce88, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0x3b73cdce88, DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Policies\Microsoft\Windows\Display") => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0 [ProcessBasicInformation], ProcessInformation=0x3b73cdca30, Length=0x30, ReturnLength=null) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73997010, Buffer=0x3b73cdca10, BufferSize=8, BytesRead=0x3b73cdca28 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73997018, Buffer=0x3b73cdca20, BufferSize=8, BytesRead=0x3b73cdca28 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff9c3624d20, Buffer=0x3b73cdca18, BufferSize=8, BytesRead=0x3b73cdca28 [8]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x18515f2aa70, Buffer=0x3b73cdca88, BufferSize=0x88, BytesRead=0x3b73cdca28 [0x88]) => 0
NtReadVirtualMemory(ProcessHandle=-1, BaseAddress=0x18515f2a466, Buffer=0x3b73cdcb50, BufferSize=0x16, BytesRead=0x3b73cdca80 [0x16]) => 0
NtOpenKey(KeyHandle=0x3b73cdce88 [0x1b4], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize") => 0
NtQueryValueKey(KeyHandle=0x1b4, ValueName="DisableMetaFiles", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdced0, Length=0x14, ResultLength=0x3b73cdce80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x1b4) => 0
NtQuerySystemInformation(SystemInformationClass=0x67 [SystemCodeIntegrityInformation], SystemInformation=0x3b73cdccb8, Length=8, ReturnLength=null) => 0
NtCreateMutant(MutantHandle=0x3b73cdd0b8 [0x1c8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02", InitialOwner=false) => 0x40000000 [698 '{Object Exists}

An attempt was made to create an object and the object name already existed.']
NtWaitForSingleObject(Handle=0x1c8, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0x3b73cdce58 [0x1b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0") => 0
NtWaitForSingleObject(Handle=0x1b4, Alertable=false, Timeout=0x3b73cdce08 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x1b4, Count=1, PreviousCount=0x3b73cdce90 [0x457cb53f]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x1b4, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtOpenSemaphore(SemaphoreHandle=0x3b73cdce58 [0x180], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0h") => 0
NtWaitForSingleObject(Handle=0x180, Alertable=false, Timeout=0x3b73cdce08 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x180, Count=1, PreviousCount=0x3b73cdce90 [0xc1]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x180, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtClose(Handle=0x180) => 0
NtClose(Handle=0x1b4) => 0
NtReleaseMutant(MutantHandle=0x1c8, PreviousCount=null) => 0
NtClose(Handle=0x1c8) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd290, Length=4, ResultLength=0x3b73cdd294 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd308 [0x1c8], DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x1c8, ValueName="PageAllocatorUseSystemHeap", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdd370, Length=0x14, ResultLength=0x3b73cdd330) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x1c8) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd290, Length=4, ResultLength=0x3b73cdd294 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd308 [0x1c8], DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x1c8, ValueName="PageAllocatorSystemHeapIsPrivate", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdd370, Length=0x14, ResultLength=0x3b73cdd330) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x1c8) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd2d0, Length=4, ResultLength=0x3b73cdd2d4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd348 [0x180], DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"SOFTWARE\Microsoft\OLE", OpenOptions=0) => 0
NtQueryValueKey(KeyHandle=0x180, ValueName="AggressiveMTATesting", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x3b73cdd3b0, Length=0x10, ResultLength=0x3b73cdd370) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0x180) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x14 [TokenElevation], TokenInformation=0x3b73cdd400, Length=4, ReturnLength=0x3b73cdd404 [4]) => 0
NtQueryInformationToken(TokenHandle=-4, TokenInformationClass=0x12 [TokenElevationType], TokenInformation=0x3b73cdd434, Length=4, ReturnLength=0x3b73cdd400 [4]) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd1e0, Length=4, ResultLength=0x3b73cdd1e4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd258 [0x180], DesiredAccess=READ_CONTROL|0x119, ObjectAttributes=0xe4:"", OpenOptions=0) => 0
NtSetInformationKey(KeyHandle=0x180, KeySetInformationClass=5 [KeySetHandleTagsInformation], KeyInformation=0x3b73cdd254, Length=4) => 0
NtQueryKey(KeyHandle=0x180, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd190, Length=4, ResultLength=0x3b73cdd194 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd208, DesiredAccess=KEY_READ, ObjectAttributes=0x180:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x180, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd0c0, Length=4, ResultLength=0x3b73cdd0c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd138, DesiredAccess=KEY_READ, ObjectAttributes=0x180:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x180, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd0c0, Length=4, ResultLength=0x3b73cdd0c4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd138 [0x184], DesiredAccess=KEY_READ, ObjectAttributes=0x180:"Software\Microsoft\Ole", OpenOptions=0) => 0
NtCreateEvent(EventHandle=0x3b73cdd338 [0x1c8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x184, Event=0x1c8, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec112f0 [0/0], CompletionFilter=0x10000001, WatchTree=false, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtOpenThreadToken(ThreadHandle=-2, DesiredAccess=0x4, OpenAsSelf=true, TokenHandle=0x3b73cdd440) => 0xc000007c [1008 'An attempt was made to reference a token that does not exist.']
NtQueryKey(KeyHandle=0x1b4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd180, Length=4, ResultLength=0x3b73cdd184 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd1f8 [0x1cc], DesiredAccess=READ_CONTROL|0x119, ObjectAttributes=0x1b4:"Software\Classes\Local Settings", OpenOptions=0) => 0
NtSetInformationKey(KeyHandle=0x1cc, KeySetInformationClass=5 [KeySetHandleTagsInformation], KeyInformation=0x3b73cdd1f4, Length=4) => 0
NtClose(Handle=0x1b4) => 0
NtQueryKey(KeyHandle=0x1cc, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd1a0, Length=4, ResultLength=0x3b73cdd1a4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd218, DesiredAccess=KEY_READ, ObjectAttributes=0x1cc:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1cc, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd0d0, Length=4, ResultLength=0x3b73cdd0d4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd148, DesiredAccess=KEY_READ, ObjectAttributes=0x1cc:"Software\Microsoft\Ole\FeatureDevelopmentProperties", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1cc, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd0d0, Length=4, ResultLength=0x3b73cdd0d4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd148, DesiredAccess=KEY_READ, ObjectAttributes=0x1cc:"Software\Microsoft\Ole", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryKey(KeyHandle=0x1cc, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd0d0, Length=4, ResultLength=0x3b73cdd0d4 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd148 [0x1d0], DesiredAccess=KEY_READ, ObjectAttributes=0x1cc:"Software\Microsoft", OpenOptions=0) => 0
NtCreateEvent(EventHandle=0x3b73cdd348 [0x1d4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtNotifyChangeKey(KeyHandle=0x1d0, Event=0x1d4, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x7ff9bec112f0 [0/0], CompletionFilter=0x10000001, WatchTree=true, Buffer=null, BufferSize=0, Asynchronous=true) => 0x103 [997 'Overlapped I/O operation is in progress.']
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd100, Length=4, ResultLength=0x3b73cdd104 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd178, DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"Software\Microsoft\OLE\Tracing", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x16c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x168], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x188], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x1e4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x1e8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtCreateEvent(EventHandle=0x3b73cdd4d8 [0x1ec], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=1 [SynchronizationEvent], InitialState=false) => 0
NtOpenEvent(EventHandle=0x3b73cdd528, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0x98:"HookSwitchHookEnabledEvent") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateMutant(MutantHandle=0x3b73cdd0f8 [0x218], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02", InitialOwner=false) => 0x40000000 [698 '{Object Exists}

An attempt was made to create an object and the object name already existed.']
NtWaitForSingleObject(Handle=0x218, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0x3b73cdce98 [0x21c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0") => 0
NtWaitForSingleObject(Handle=0x21c, Alertable=false, Timeout=0x3b73cdce48 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x21c, Count=1, PreviousCount=0x3b73cdced0 [0x457cb53f]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x21c, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtOpenSemaphore(SemaphoreHandle=0x3b73cdce98 [0x220], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0x98:"Local\SM0:11932:304:WilStaging_02_p0h") => 0
NtWaitForSingleObject(Handle=0x220, Alertable=false, Timeout=0x3b73cdce48 [0]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x220, Count=1, PreviousCount=0x3b73cdced0 [0xc1]) => 0
NtReleaseSemaphore(SemaphoreHandle=0x220, Count=1, PreviousCount=null) => 0xc0000047 [298 'Too many posts were made to a semaphore.']
NtClose(Handle=0x220) => 0
NtClose(Handle=0x21c) => 0
NtReleaseMutant(MutantHandle=0x218, PreviousCount=null) => 0
NtClose(Handle=0x218) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdcf30, Length=4, ResultLength=0x3b73cdcf34 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdcfa8, DesiredAccess=KEY_READ, ObjectAttributes=0xe4:"Software\Microsoft\OLE\Tracing", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x3b73cdd310, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0x3b73cdd300, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0x3b73cdd290, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x3b73cdd310, Length=0x40, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=1 [SystemProcessorInformation], SystemInformation=0x3b73cdd300, Length=0xc, ReturnLength=null) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x25 [ProcessImageInformation], ProcessInformation=0x3b73cdd290, Length=0x40, ReturnLength=null) => 0
NtQueryKey(KeyHandle=0xe4, KeyInformationClass=7 [KeyHandleTagsInformation], KeyInformation=0x3b73cdd330, Length=4, ResultLength=0x3b73cdd334 [4]) => 0
NtOpenKeyEx(KeyHandle=0x3b73cdd3a8, DesiredAccess=0x1, ObjectAttributes=0xe4:"SOFTWARE\Microsoft\OLEAUT", OpenOptions=0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cdddc0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cddde0, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cdcd40 [0/0x68], FileInformation=0x3b73cdceb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cdcd40 [0/0x68], FileInformation=0x3b73cdceb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cdcd40 [0/0x68], FileInformation=0x3b73cdceb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\datetime.py", IoStatusBlock=0x3b73cdcd40 [0/0x68], FileInformation=0x3b73cdceb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\datetime.py", IoStatusBlock=0x3b73cdcd40 [0/0x68], FileInformation=0x3b73cdceb0, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdc798 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\__pycache__\datetime.cpython-314.pyc", IoStatusBlock=0x3b73cdc7d0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc910 [0/8], FsInformation=0x3b73cdc900, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc990 [0/8], FsInformation=0x3b73cdc980, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc8c0 [0/0x12], FsInformation=0x3b73cdc8d0, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc8c0, FileInformation=0x3b73cdc8f0, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc990 [0/0x28], FileInformation=0x3b73cdcaa8, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc990 [0/0x18], FileInformation=0x3b73cdca90, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc800 [0/8], FileInformation=0x3b73cdc7f0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdc800 [0/0], FileInformation=0x3b73cdc7f0, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdcdd0 [0/0x1fd], Buffer=0x18515fd3db0, Length=0x1fe, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdcdd0, Buffer=0x18515fd3fad, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x228) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cdddc0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cddde0, Length=4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", Attributes=0x3b73cdd860 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdd8a8 [0x228], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd", IoStatusBlock=0x3b73cdd910 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdd8b0 [0x22c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x228) => 0
Loaded DLL at 00007FF9B1350000 C:\Program Files\Python314\Lib\site-packages\win32\win32pipe.pyd
NtMapViewOfSection(SectionHandle=0x22c, ProcessHandle=-1, BaseAddress=0x18515ff1b60 [0x00007ff9b1350000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1851f28a1d8 [0xc000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cdddc0, Length=4, ReturnLength=null) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0xc [ProcessDefaultHardErrorMode], ProcessInformation=0x3b73cddde0, Length=4) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\DLLs", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\win32con.py", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\win32con.py", IoStatusBlock=0x3b73cddfb0 [0/0x68], FileInformation=0x3b73cde120, Length=0x68, FileInformationClass=0x4d [FileStatBasicInformation]) => 0
NtCreateFile(FileHandle=0x3b73cdda08 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Program Files\Python314\Lib\site-packages\win32\lib\__pycache__\win32con.cpython-314.pyc", IoStatusBlock=0x3b73cdda40 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=3, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddb80 [0/8], FsInformation=0x3b73cddb70, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddc00 [0/8], FsInformation=0x3b73cddbf0, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddb30 [0/0x12], FsInformation=0x3b73cddb40, Length=0x18, FsInformationClass=1 [FsVolumeInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddb30, FileInformation=0x3b73cddb60, Length=0x68, FileInformationClass=0x12 [FileAllInformation]) => 0x80000005 [234 'More data is available.']
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddc00 [0/0x28], FileInformation=0x3b73cddd18, Length=0x28, FileInformationClass=4 [FileBasicInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cddc00 [0/0x18], FileInformation=0x3b73cddd00, Length=0x18, FileInformationClass=0x3b [FileIdInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdda70 [0/8], FileInformation=0x3b73cdda60, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cdda70 [0/0], FileInformation=0x3b73cdda60, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtQueryInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cde030 [0/8], FileInformation=0x3b73cde020, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtSetInformationFile(FileHandle=0x228, IoStatusBlock=0x3b73cde030 [0/0], FileInformation=0x3b73cde020, Length=8, FileInformationClass=0xe [FilePositionInformation]) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde040 [0/0x00023cdc], Buffer=0x1851f4666b0, Length=0x00023cdd, ByteOffset=null, Key=null) => 0
NtReadFile(FileHandle=0x228, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cde040, Buffer=0x1851f48a38c, Length=1, ByteOffset=null, Key=null) => 0xc0000011 [38 'Reached the end of the file.']
NtClose(Handle=0x228) => 0
NtAllocateVirtualMemory(ProcessHandle=-1, lpAddress=0x3b73cddc90 [0x000001851fc20000], ZeroBits=0, pSize=0x3b73cddc98 [0x00100000], flAllocationType=0x3000, flProtect=4) => 0
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-0", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x230], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-0", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x228, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x238], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-1", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x23c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-1", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x238, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x240], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-2", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-2", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x240, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x248], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-3", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x24c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-3", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x248, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x260], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-4", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x234], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-4", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x260, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x22c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-5", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x264], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-5", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x22c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x268], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-6", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x26c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-6", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x268, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x270], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-7", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x274], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-7", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x270, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x278], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-8", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x27c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-8", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x278, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x284], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-9", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x288], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-9", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x284, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x28c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-10", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x290], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-10", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x28c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x294], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-11", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x298], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-11", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x294, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x29c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-12", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-12", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x29c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-13", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-13", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-14", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-14", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-15", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2b8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-15", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2bc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-16", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2c0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-16", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2c4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-17", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-17", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-18", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-18", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-19", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2d8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-19", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2dc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-20", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2e0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-20", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-21", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2e8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-21", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2ec], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-22", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2f0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-22", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-23", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x2f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-23", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x2fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-24", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x300], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-24", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x304], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-25", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x308], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-25", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x304, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x30c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-26", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x310], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-26", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x30c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x314], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-27", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x318], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-27", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x314, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x31c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-28", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x320], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-28", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x31c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x324], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-29", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x328], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-29", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x324, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x32c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-30", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x330], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-30", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x32c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x334], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-31", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x338], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-31", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x334, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x33c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-32", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x344], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-32", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x33c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x348], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-33", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x34c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-33", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x348, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x350], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-34", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x354], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-34", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x350, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x358], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-35", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x35c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-35", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x358, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x360], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-36", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x364], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-36", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x360, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x368], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-37", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x36c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-37", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x368, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x374], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-38", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x378], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-38", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x374, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x37c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-39", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x380], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-39", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x37c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x384], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-40", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x388], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-40", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x384, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x38c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-41", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x390], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-41", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x38c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x394], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-42", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x398], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-42", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x394, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x39c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-43", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-43", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x39c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-44", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-44", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-45", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-45", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-46", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3b8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-46", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3bc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-47", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3c0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-47", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3c4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-48", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-48", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-49", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-49", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-50", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3d8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-50", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3e0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-51", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-51", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3e8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-52", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3ec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-52", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3f0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-53", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3f4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-53", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x3f8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-54", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x3fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-54", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x404], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-55", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x408], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-55", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x404, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x40c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-56", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x410], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-56", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x40c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x414], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-57", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x418], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-57", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x414, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x41c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-58", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x420], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-58", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x41c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x424], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-59", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x428], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-59", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x424, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x42c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-60", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x430], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-60", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x42c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x434], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-61", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x438], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-61", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x434, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x43c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-62", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x440], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-62", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x43c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x444], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-63", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x448], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-63", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x444, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x44c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-64", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x450], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-64", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x44c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x454], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-65", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x458], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-65", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x454, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x45c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-66", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x460], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-66", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x45c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x464], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-67", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x468], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-67", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x464, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x46c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-68", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x470], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-68", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x46c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x474], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-69", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x478], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-69", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x474, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x47c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-70", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x480], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-70", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x47c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x484], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-71", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x488], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-71", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x484, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x48c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-72", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x490], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-72", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x48c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x494], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-73", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x498], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-73", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x494, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x49c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-74", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-74", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x49c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-75", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-75", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-76", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-76", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-77", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4b8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-77", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4bc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-78", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4c0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-78", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4c4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-79", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-79", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-80", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-80", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-81", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4d8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-81", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4dc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-82", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4e0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-82", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4e4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-83", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4e8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-83", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4ec], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-84", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4f0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-84", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-85", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x4f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-85", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x4fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-86", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x500], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-86", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x504], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-87", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x508], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-87", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x504, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x50c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-88", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x510], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-88", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x50c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x514], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-89", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x518], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-89", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x514, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x51c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-90", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x520], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-90", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x51c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x524], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-91", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x528], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-91", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x524, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x52c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-92", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x530], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-92", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x52c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x534], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-93", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x538], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-93", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x534, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x53c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-94", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x540], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-94", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x53c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x544], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-95", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x548], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-95", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x544, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x54c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-96", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x550], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-96", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x54c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x554], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-97", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x558], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-97", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x554, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x55c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-98", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x560], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-98", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x55c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0x3b73cded90 [0x564], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-99", IoStatusBlock=0x3b73cdedf0 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0x3b73cdeda0 [-500000]) => 0
NtCreateFile(FileHandle=0x3b73cdecb8 [0x568], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-99", IoStatusBlock=0x3b73cdecf0 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x564, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdeea0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x5b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x56c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x56c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x56c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x58c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x58c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x58c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x228, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x238, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x240, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x248, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x260, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x268, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x270, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x284, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x28c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x294, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x29c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2bc, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c4, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2cc, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2dc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ec, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f4, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2fc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x304, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x30c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x314, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x31c, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x324, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x32c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x334, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x33c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x374, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x37c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x384, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x38c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x394, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x39c, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a4, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3ac, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3bc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3cc, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d4, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x5ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5ac) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x5a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a8) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x574], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x574, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x574) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x594], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x594, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x594) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x464, Event=0x5a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x46c, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x59c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x474, Event=0x59c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x59c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x584], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x47c, Event=0x584, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x584) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x484, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x48c, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x494, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x49c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4a4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ac, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4b4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4bc, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4c4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4cc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4d4, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4dc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x570], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4e4, Event=0x570, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x570) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4ec, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4f4, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x4fc, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x504, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x50c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x514, Event=0x5a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5a4) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x51c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x524, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x588], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x52c, Event=0x588, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x588) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x534, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x598], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x53c, Event=0x598, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x598) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x590], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x544, Event=0x590, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x590) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x57c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x54c, Event=0x57c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x57c) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x580], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x554, Event=0x580, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x580) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x578], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x55c, Event=0x578, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x578) => 0
NtCreateEvent(EventHandle=0x3b73cdee18 [0x5b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x564, Event=0x5b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0x3b73cdee40 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x18515fd3fc0, OutputBufferLength=0x10) => 0
NtClose(Handle=0x5b0) => 0
NtClose(Handle=0x228) => 0
NtClose(Handle=0x238) => 0
NtClose(Handle=0x240) => 0
NtClose(Handle=0x248) => 0
NtClose(Handle=0x260) => 0
NtClose(Handle=0x22c) => 0
NtClose(Handle=0x268) => 0
NtClose(Handle=0x270) => 0
NtClose(Handle=0x278) => 0
NtClose(Handle=0x284) => 0
NtClose(Handle=0x28c) => 0
NtClose(Handle=0x294) => 0
NtClose(Handle=0x29c) => 0
NtClose(Handle=0x2a4) => 0
NtClose(Handle=0x2ac) => 0
NtClose(Handle=0x2b4) => 0
NtClose(Handle=0x2bc) => 0
NtClose(Handle=0x2c4) => 0
NtClose(Handle=0x2cc) => 0
NtClose(Handle=0x2d4) => 0
NtClose(Handle=0x2dc) => 0
NtClose(Handle=0x2e4) => 0
NtClose(Handle=0x2ec) => 0
NtClose(Handle=0x2f4) => 0
NtClose(Handle=0x2fc) => 0
NtClose(Handle=0x304) => 0
NtClose(Handle=0x30c) => 0
NtClose(Handle=0x314) => 0
NtClose(Handle=0x31c) => 0
NtClose(Handle=0x324) => 0
NtClose(Handle=0x32c) => 0
NtClose(Handle=0x334) => 0
NtClose(Handle=0x33c) => 0
NtClose(Handle=0x348) => 0
NtClose(Handle=0x350) => 0
NtClose(Handle=0x358) => 0
NtClose(Handle=0x360) => 0
NtClose(Handle=0x368) => 0
NtClose(Handle=0x374) => 0
NtClose(Handle=0x37c) => 0
NtClose(Handle=0x384) => 0
NtClose(Handle=0x38c) => 0
NtClose(Handle=0x394) => 0
NtClose(Handle=0x39c) => 0
NtClose(Handle=0x3a4) => 0
NtClose(Handle=0x3ac) => 0
NtClose(Handle=0x3b4) => 0
NtClose(Handle=0x3bc) => 0
NtClose(Handle=0x3c4) => 0
NtClose(Handle=0x3cc) => 0
NtClose(Handle=0x3d4) => 0
NtClose(Handle=0x3e0) => 0
NtClose(Handle=0x3e8) => 0
NtClose(Handle=0x3f0) => 0
NtClose(Handle=0x3f8) => 0
NtClose(Handle=0x404) => 0
NtClose(Handle=0x40c) => 0
NtClose(Handle=0x414) => 0
NtClose(Handle=0x41c) => 0
NtClose(Handle=0x424) => 0
NtClose(Handle=0x42c) => 0
NtClose(Handle=0x434) => 0
NtClose(Handle=0x43c) => 0
NtClose(Handle=0x444) => 0
NtClose(Handle=0x44c) => 0
NtClose(Handle=0x454) => 0
NtClose(Handle=0x45c) => 0
NtClose(Handle=0x464) => 0
NtClose(Handle=0x46c) => 0
NtClose(Handle=0x474) => 0
NtClose(Handle=0x47c) => 0
NtClose(Handle=0x484) => 0
NtClose(Handle=0x48c) => 0
NtClose(Handle=0x494) => 0
NtClose(Handle=0x49c) => 0
NtClose(Handle=0x4a4) => 0
NtClose(Handle=0x4ac) => 0
NtClose(Handle=0x4b4) => 0
NtClose(Handle=0x4bc) => 0
NtClose(Handle=0x4c4) => 0
NtClose(Handle=0x4cc) => 0
NtClose(Handle=0x4d4) => 0
NtClose(Handle=0x4dc) => 0
NtClose(Handle=0x4e4) => 0
NtClose(Handle=0x4ec) => 0
NtClose(Handle=0x4f4) => 0
NtClose(Handle=0x4fc) => 0
NtClose(Handle=0x504) => 0
NtClose(Handle=0x50c) => 0
NtClose(Handle=0x514) => 0
NtClose(Handle=0x51c) => 0
NtClose(Handle=0x524) => 0
NtClose(Handle=0x52c) => 0
NtClose(Handle=0x534) => 0
NtClose(Handle=0x53c) => 0
NtClose(Handle=0x544) => 0
NtClose(Handle=0x54c) => 0
NtClose(Handle=0x554) => 0
NtClose(Handle=0x55c) => 0
NtClose(Handle=0x564) => 0
NtClose(Handle=0x230) => 0
NtClose(Handle=0x23c) => 0
NtClose(Handle=0x244) => 0
NtClose(Handle=0x24c) => 0
NtClose(Handle=0x234) => 0
NtClose(Handle=0x264) => 0
NtClose(Handle=0x26c) => 0
NtClose(Handle=0x274) => 0
NtClose(Handle=0x27c) => 0
NtClose(Handle=0x288) => 0
NtClose(Handle=0x290) => 0
NtClose(Handle=0x298) => 0
NtClose(Handle=0x2a0) => 0
NtClose(Handle=0x2a8) => 0
NtClose(Handle=0x2b0) => 0
NtClose(Handle=0x2b8) => 0
NtClose(Handle=0x2c0) => 0
NtClose(Handle=0x2c8) => 0
NtClose(Handle=0x2d0) => 0
NtClose(Handle=0x2d8) => 0
NtClose(Handle=0x2e0) => 0
NtClose(Handle=0x2e8) => 0
NtClose(Handle=0x2f0) => 0
NtClose(Handle=0x2f8) => 0
NtClose(Handle=0x300) => 0
NtClose(Handle=0x308) => 0
NtClose(Handle=0x310) => 0
NtClose(Handle=0x318) => 0
NtClose(Handle=0x320) => 0
NtClose(Handle=0x328) => 0
NtClose(Handle=0x330) => 0
NtClose(Handle=0x338) => 0
NtClose(Handle=0x344) => 0
NtClose(Handle=0x34c) => 0
NtClose(Handle=0x354) => 0
NtClose(Handle=0x35c) => 0
NtClose(Handle=0x364) => 0
NtClose(Handle=0x36c) => 0
NtClose(Handle=0x378) => 0
NtClose(Handle=0x380) => 0
NtClose(Handle=0x388) => 0
NtClose(Handle=0x390) => 0
NtClose(Handle=0x398) => 0
NtClose(Handle=0x3a0) => 0
NtClose(Handle=0x3a8) => 0
NtClose(Handle=0x3b0) => 0
NtClose(Handle=0x3b8) => 0
NtClose(Handle=0x3c0) => 0
NtClose(Handle=0x3c8) => 0
NtClose(Handle=0x3d0) => 0
NtClose(Handle=0x3d8) => 0
NtClose(Handle=0x3e4) => 0
NtClose(Handle=0x3ec) => 0
NtClose(Handle=0x3f4) => 0
NtClose(Handle=0x3fc) => 0
NtClose(Handle=0x408) => 0
NtClose(Handle=0x410) => 0
NtClose(Handle=0x418) => 0
NtClose(Handle=0x420) => 0
NtClose(Handle=0x428) => 0
NtClose(Handle=0x430) => 0
NtClose(Handle=0x438) => 0
NtClose(Handle=0x440) => 0
NtClose(Handle=0x448) => 0
NtClose(Handle=0x450) => 0
NtClose(Handle=0x458) => 0
NtClose(Handle=0x460) => 0
NtClose(Handle=0x468) => 0
NtClose(Handle=0x470) => 0
NtClose(Handle=0x478) => 0
NtClose(Handle=0x480) => 0
NtClose(Handle=0x488) => 0
NtClose(Handle=0x490) => 0
NtClose(Handle=0x498) => 0
NtClose(Handle=0x4a0) => 0
NtClose(Handle=0x4a8) => 0
NtClose(Handle=0x4b0) => 0
NtClose(Handle=0x4b8) => 0
NtClose(Handle=0x4c0) => 0
NtClose(Handle=0x4c8) => 0
NtClose(Handle=0x4d0) => 0
NtClose(Handle=0x4d8) => 0
NtClose(Handle=0x4e0) => 0
NtClose(Handle=0x4e8) => 0
NtClose(Handle=0x4f0) => 0
NtClose(Handle=0x4f8) => 0
NtClose(Handle=0x500) => 0
NtClose(Handle=0x508) => 0
NtClose(Handle=0x510) => 0
NtClose(Handle=0x518) => 0
NtClose(Handle=0x520) => 0
NtClose(Handle=0x528) => 0
NtClose(Handle=0x530) => 0
NtClose(Handle=0x538) => 0
NtClose(Handle=0x540) => 0
NtClose(Handle=0x548) => 0
NtClose(Handle=0x550) => 0
NtClose(Handle=0x558) => 0
NtClose(Handle=0x560) => 0
NtClose(Handle=0x568) => 0
done: 100 pipes, 2s, 1600 PeekNamedPipe calls, 0 bytes received
NtWriteFile(FileHandle=0xa74, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0x3b73cdf3c0 [0/0x41], Buffer=0x1851f28e3f0, Length=0x41, ByteOffset=null, Key=null) => 0
NtClose(Handle=0x15c) => 0
NtFreeVirtualMemory(ProcessHandle=-1, lpAddress=0x3b73cdfb88 [0x000001851f000000], pSize=0x3b73cdfb80 [0x4000], flFreeType=0x8000) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", Attributes=0x3b73cdf690 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0x3b73cdf6d8 [0x568], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", IoStatusBlock=0x3b73cdf740 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0x3b73cdf6e0 [0x548], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x568) => 0
Loaded DLL at 00007FF9BC190000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll
NtMapViewOfSection(SectionHandle=0x548, ProcessHandle=-1, BaseAddress=0x1851f302360 [0x00007ff9bc190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x18515f4a768 [0x00031000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdfc68 [0x00007ff9bf020000], Size=0x3b73cdfc60 [0x1000], NewProtect=4, OldProtect=0x3b73cdfca0 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0x3b73cdfc68 [0x00007ff9bf020000], Size=0x3b73cdfc60 [0x1000], NewProtect=2, OldProtect=0x3b73cdfca0 [4]) => 0
NtQueryWnfStateData(StateName=0x3b73cdf5e0 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0x3b73cde4b4 [0x5771], Buffer=0x3b73cde590, BufferSize=0x3b73cde4b0 [0xffe]) => 0
NtClose(Handle=0x1d4) => 0
NtClose(Handle=0x1d0) => 0
NtClose(Handle=0x1cc) => 0
NtClose(Handle=0x1c8) => 0
NtClose(Handle=0x184) => 0
NtClose(Handle=0x180) => 0
NtQueryWnfStateData(StateName=0x3b73cdf610 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0x3b73cde4e4 [0x5771], Buffer=0x3b73cde5c0, BufferSize=0x3b73cde4e0 [0xffe]) => 0
NtClose(Handle=0x150) => 0
NtQueryWnfStateData(StateName=0x3b73cdf6d0 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0x3b73cde624 [0x5771], Buffer=0x3b73cde678, BufferSize=0x3b73cde620 [0xffe]) => 0
Process 11932 exit code: 0
