Process 21064 starting at 00007FF719261930 with command line: "wait_peek.exe 100 2"
C:\Users\administrator\pb158\demo\waiting\wait_peek.exe
Loaded DLL at 00007FF9C3290000 ntdll.dll
Loaded DLL at 00007FF9C1D20000 C:\WINDOWS\System32\xtajit64se.dll
Loaded DLL at 00007FF9C1380000 C:\WINDOWS\System32\KERNEL32.DLL
NtMapViewOfSection(SectionHandle=0x88, ProcessHandle=-1, BaseAddress=0x1e97e2f7840 [0x00007ff9c1380000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1e97e2f9dd8 [0x00169000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9BE5D0000 C:\WINDOWS\System32\KERNELBASE.dll
NtMapViewOfSection(SectionHandle=0x94, ProcessHandle=-1, BaseAddress=0x1e97e2f7fe0 [0x00007ff9be5d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1e97e2f7f28 [0x006da000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQuerySystemInformation(SystemInformationClass=0x32 [SystemRangeStartInformation], SystemInformation=0xc7414fe1b0, Length=8, ReturnLength=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9bec10e80, Length=0x40, ReturnLength=null) => 0
NtCreateSection(SectionHandle=0xc7414fdfc8 [0x9c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x1f, ObjectAttributes=null, SectionSize=0xc7414fdfd8 [65536], Protect=4, Attributes=0x08000000, FileHandle=0) => 0
NtMapViewOfSection(SectionHandle=0x98, ProcessHandle=-1, BaseAddress=0xc7414fdfd0 [0x00007ff3cadc0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xc7414fe010 [0x00100000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtGetNlsSectionPtr(SectionType=0xe, SectionData=0, ContextData=null, SectionPointer=0xc7414fe188 [0x000001e97ea60000], SectionSize=null) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x4e4, ContextData=null, SectionPointer=0xc7414fe128 [0x000001e97eb50000], SectionSize=0xc7414fe130 [0x00011000]) => 0
NtGetNlsSectionPtr(SectionType=0xb, SectionData=0x1b5, ContextData=null, SectionPointer=0xc7414fe128 [0x000001e97eb70000], SectionSize=0xc7414fe130 [0x00011000]) => 0
NtCreateFile(FileHandle=0xc7414fe178 [0x98], DesiredAccess=READ_CONTROL|SYNCHRONIZE|0x19f, ObjectAttributes=4:"\Connect", IoStatusBlock=0xc7414fdbb0 [0/0x18], AllocationSize=null, FileAttributes=0, ShareAccess=7, CreateDisposition=2, CreateOptions=0x20, EaBuffer=0x1e97e2fb540, EaLength=0x54b) => 0
NtDeviceIoControlFile(FileHandle=0x98, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xc7414fe140 [0/0], IoControlCode=0x00500023, InputBuffer=null, InputBufferLength=0, OutputBuffer=0xc7414fe130, OutputBufferLength=8) => 0
NtSetInformationProcess(ProcessHandle=-1, ProcessInformationClass=0x31 [ProcessOwnerInformation], ProcessInformation=0xc7414fe138, Length=8) => 0
NtDeviceIoControlFile(FileHandle=0x98, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xc7414fdfe0, IoControlCode=0x00500016, InputBuffer=0xc7414fdff0, InputBufferLength=0x30, OutputBuffer=null, OutputBufferLength=0) => 0xc00700bb [187 'The specified system semaphore name was not found.']
NtOpenProcessToken(ProcessHandle=-1, DesiredAccess=0x8, TokenHandle=0xc7414fe000 [0xa4]) => 0
NtQueryInformationToken(TokenHandle=0xa4, TokenInformationClass=0xc [TokenSessionId], TokenInformation=0xc7414fd988, Length=4, ReturnLength=0xc7414fd98c [4]) => 0
NtQueryInformationToken(TokenHandle=0xa4, TokenInformationClass=0x1d [TokenIsAppContainer], TokenInformation=0xc7414fd9b0, Length=4, ReturnLength=0xc7414fd98c [4]) => 0
NtQueryInformationToken(TokenHandle=0xa4, TokenInformationClass=0x2a [TokenPrivateNameSpace], TokenInformation=0xc7414fd948, Length=4, ReturnLength=0xc7414fd98c [4]) => 0
NtOpenDirectoryObject(DirectoryHandle=0xc7414fd940 [0xa8], DesiredAccess=0xf, ObjectAttributes="\BaseNamedObjects") => 0
NtQueryInformationToken(TokenHandle=0xa4, TokenInformationClass=0x2c [TokenBnoIsolation], TokenInformation=0xc7414fdc58, Length=0x120, ReturnLength=0xc7414fd98c [0x10]) => 0
NtClose(Handle=0xa4) => 0
NtCreateMutant(MutantHandle=0xc7414fe048 [0xac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x1, ObjectAttributes=0xa8:"Local\SM0:21064:304:WilStaging_02", InitialOwner=false) => 0
NtWaitForSingleObject(Handle=0xac, Alertable=false, Timeout=null) => 0
NtOpenSemaphore(SemaphoreHandle=0xc7414fdd98, DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0xa8:"Local\SM0:21064:304:WilStaging_02_p0") => 0xc0000034 [2 'The system cannot find the file specified.']
NtCreateSemaphore(SemaphoreHandle=0xc7414fdd38 [0x8c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0xa8:"Local\SM0:21064:304:WilStaging_02_p0", InitialCount=0x5f8beeb0, MaxCount=0x5f8beeb0) => 0
NtCreateSemaphore(SemaphoreHandle=0xc7414fdd30 [0x90], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=0xa8:"Local\SM0:21064:304:WilStaging_02_p0h", InitialCount=0xf4, MaxCount=0xf4) => 0
NtReleaseMutant(MutantHandle=0xac, PreviousCount=null) => 0
NtQuerySystemInformation(SystemInformationClass=0 [SystemBasicInformation], SystemInformation=0x7ff9c14d70c0, Length=0x40, ReturnLength=null) => 0
NtOpenKey(KeyHandle=0xc7414fea78 [0xa4], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\FileSystem\") => 0
NtQueryValueKey(KeyHandle=0xa4, ValueName="LongPathsEnabled", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414feab0, Length=0x14, ResultLength=0xc7414fea70 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xa4, ValueName="LPGO", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414feab0, Length=0x14, ResultLength=0xc7414fea70) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xa4) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", Attributes=0xc7414fe450 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xc7414fe498 [0xbc], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\apphelp.dll", IoStatusBlock=0xc7414fe500 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xc7414fe4a0 [0xc4], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0xbc) => 0
Loaded DLL at 00007FF9BE160000 C:\WINDOWS\SYSTEM32\apphelp.dll
NtMapViewOfSection(SectionHandle=0xc4, ProcessHandle=-1, BaseAddress=0x1e97e2f7c90 [0x00007ff9be160000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1e97e2f7bb8 [0x00106000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtOpenKey(KeyHandle=0xc7414fdde8 [0xd0], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xd0, ValueName="LogFlags", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fddc0, Length=0x14, ResultLength=0xc7414fddb0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xd0) => 0
NtOpenKey(KeyHandle=0xc7414fdde8, DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\OSDATA\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0xc0000034 [2 'The system cannot find the file specified.']
NtOpenKey(KeyHandle=0xc7414fe048 [0xc8], DesiredAccess=0x1, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags") => 0
NtQueryValueKey(KeyHandle=0xc8, ValueName="ShowDebugInfo", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fe020, Length=0x14, ResultLength=0xc7414fe010) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc8) => 0
NtOpenFile(FileHandle=0xc7414fe3c8 [0xe0], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek.exe", IoStatusBlock=0xc7414fe440 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xc7414fe3d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xe0, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x1e97e301530, SecurityDescriptorLength=0x24, ReturnLength=0xc7414fe3d8 [0x24]) => 0
NtClose(Handle=0xe0) => 0
NtOpenFile(FileHandle=0xc7414fe3c8 [0xc8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\ntdll.dll", IoStatusBlock=0xc7414fe440 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xc7414fe3d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x1e97e301930, SecurityDescriptorLength=0x34, ReturnLength=0xc7414fe3d8 [0x34]) => 0
NtClose(Handle=0xc8) => 0
NtOpenFile(FileHandle=0xc7414fe3c8 [0xc8], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\xtajit64se.dll", IoStatusBlock=0xc7414fe440 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xc8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xc7414fe3d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xc8, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x1e97e301930, SecurityDescriptorLength=0x34, ReturnLength=0xc7414fe3d8 [0x34]) => 0
NtClose(Handle=0xc8) => 0
NtOpenFile(FileHandle=0xc7414fe3c8 [0xa4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNEL32.DLL", IoStatusBlock=0xc7414fe440 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xa4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xc7414fe3d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xa4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x1e97e301930, SecurityDescriptorLength=0x34, ReturnLength=0xc7414fe3d8 [0x34]) => 0
NtClose(Handle=0xa4) => 0
NtOpenFile(FileHandle=0xc7414fe3c8 [0xa4], DesiredAccess=READ_CONTROL, ObjectAttributes="\??\C:\WINDOWS\System32\KERNELBASE.dll", IoStatusBlock=0xc7414fe440 [0/1], ShareAccess=5, OpenOptions=0) => 0
NtQuerySecurityObject(Handle=0xa4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=null, SecurityDescriptorLength=0, ReturnLength=0xc7414fe3d8) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQuerySecurityObject(Handle=0xa4, SecurityInformation=1 [OWNER_SECURITY_INFORMATION], SecurityDescriptor=0x1e97e301930, SecurityDescriptorLength=0x34, ReturnLength=0xc7414fe3d8 [0x34]) => 0
NtClose(Handle=0xa4) => 0
NtOpenKey(KeyHandle=0xc7414fdea8 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="StagedDelete_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xc7414fdee0) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtOpenKey(KeyHandle=0xc7414fdea8 [0xe0], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xc7414fdee0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryValueKey(KeyHandle=0xe0, ValueName="sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x1e97e302c20, Length=0x48, ResultLength=0xc7414fdee0 [0x46]) => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="MergeVer_sysmain.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fde80, Length=0x14, ResultLength=0xc7414fde70 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="MergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fde80, Length=0x14, ResultLength=0xc7414fde70 [0x10]) => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="MinMergeVer", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fde80, Length=0x14, ResultLength=0xc7414fde70 [0x10]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD4957C75C2429.sysmain.sdb", IoStatusBlock=0xc7414fde00 [0/0x48], FileInformation=0xc7414fde80, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\AppPatch\sysmain.sdb", IoStatusBlock=0xc7414fde00 [0/0x48], FileInformation=0xc7414fde80, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtOpenKey(KeyHandle=0xc7414fddb8 [0xa4], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xa4, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fdd90, Length=0x14, ResultLength=0xc7414fdd80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xa4) => 0
NtOpenKey(KeyHandle=0xc7414fde08 [0xc8], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xc8, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x1e97e302db0, Length=0x28, ResultLength=0xc7414fdea4 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xc8, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x1e97e302db0, Length=0x28, ResultLength=0xc7414fdea4 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xc8, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x1e97e302e10, Length=0x230, ResultLength=0xc7414fdea4 [0x74]) => 0
NtClose(Handle=0xc8) => 0
NtQueryInformationByName(ObjectAttributes="\??\C:\WINDOWS\apppatch\MergeSdbFilesSource\sysMerge.sdb", IoStatusBlock=0xc7414fde00 [0/0x48], FileInformation=0xc7414fde80, Length=0x48, FileInformationClass=0x44 [FileStatInformation]) => 0
NtClose(Handle=0xe0) => 0
NtCreateFile(FileHandle=0xc7414fdf90 [0xc8], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\WINDOWS\AppPatch\01DD4957C75C2429.sysmain.sdb", IoStatusBlock=0xc7414fdfa0 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=5, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtQueryInformationFile(FileHandle=0xc8, IoStatusBlock=0xc7414fe030 [0/0x18], FileInformation=0xc7414fe040, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtQueryInformationFile(FileHandle=0xc8, IoStatusBlock=0xc7414fe020 [0/0x18], FileInformation=0xc7414fe030, Length=0x18, FileInformationClass=5 [FileStandardInformation]) => 0
NtCreateSection(SectionHandle=0xc7414fdfd0 [0xa4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|0x5, ObjectAttributes=null, SectionSize=null, Protect=2, Attributes=0x08000000, FileHandle=0xc8) => 0
NtMapViewOfSection(SectionHandle=0xa4, ProcessHandle=-1, BaseAddress=0xc7414fdfd8 [0x00007ff3ca9b0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0xc7414fdfe0 [0x0040d000], InheritDisposition=2 [ViewUnmap], AllocationType=0x00500000, Protect=2) => 0
NtOpenKey(KeyHandle=0xc7414fdf88 [0xcc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xcc, ValueName="DisableDoubleQuerySdbs", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0xc7414fdf60, Length=0x14, ResultLength=0xc7414fdf50) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xcc) => 0
NtOpenKey(KeyHandle=0xc7414fdfd8 [0xcc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs") => 0
NtEnumerateValueKey(KeyHandle=0xcc, Index=0, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x1e97e302ca0, Length=0x28, ResultLength=0xc7414fe074 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xcc, Index=1, KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=0x1e97e302ca0, Length=0x28, ResultLength=0xc7414fe074 [0x24]) => 0
NtEnumerateValueKey(KeyHandle=0xcc, Index=1, KeyValueInformationClass=0 [KeyValueBasicInformation], KeyValueInformation=0x1e97e302e50, Length=0x230, ResultLength=0xc7414fe074 [0x74]) => 0
NtClose(Handle=0xcc) => 0
NtOpenKey(KeyHandle=0xc7414fded8 [0xcc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xcc, ValueName="StagedDelete_sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xc7414fdf10) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xcc) => 0
NtOpenKey(KeyHandle=0xc7414fded8 [0xcc], DesiredAccess=GENERIC_READ|0x100, ObjectAttributes="\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates") => 0
NtQueryValueKey(KeyHandle=0xcc, ValueName="sysMerge.sdb", KeyValueInformationClass=2 [KeyValuePartialInformation], KeyValueInformation=null, Length=0, ResultLength=0xc7414fdf10) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xcc) => 0
NtOpenProcess(ProcessHandle=0xc7414fdd60 [0xcc], DesiredAccess=0x1000, ObjectAttributes=null, ClientId=0xc7414fdd68 [0x5248/0]) => 0
NtOpenProcessToken(ProcessHandle=0xcc, DesiredAccess=0x8, TokenHandle=0xc7414fdd30 [0xe0]) => 0
NtQueryInformationToken(TokenHandle=0xe0, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=null, Length=0, ReturnLength=0xc7414fdca0) => 0xc0000023 [122 'The data area passed to a system call is too small.']
NtQueryInformationToken(TokenHandle=0xe0, TokenInformationClass=0x27 [TokenSecurityAttributes], TokenInformation=0x1e97e302f80, Length=0xe8, ReturnLength=0xc7414fdca0 [0xe8]) => 0
NtClose(Handle=0xe0) => 0
NtCreateFile(FileHandle=0xc7414fdb90 [0xe4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek.exe", IoStatusBlock=0xc7414fdb20 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0xc7414fda88 [0xe0], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xe0, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x1e97e3032a0, Length=0x208, ResultLength=0xc7414fda80) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe0) => 0
NtApphelpCacheControl(ServiceClass=0, ServiceData="") => 0xc0000225 [1168 'Element not found.']
NtClose(Handle=0xe4) => 0
NtCreateFile(FileHandle=0xc7414fd9c8 [0xe4], DesiredAccess=SYNCHRONIZE|GENERIC_READ|0x80, ObjectAttributes="\??\C:\Users\administrator\pb158\demo\waiting\wait_peek.exe", IoStatusBlock=0xc7414fd930 [0/1], AllocationSize=null, FileAttributes=0x80, ShareAccess=1, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtOpenKey(KeyHandle=0xc7414fd898 [0xe8], DesiredAccess=0x1, ObjectAttributes="\REGISTRY\USER\S-1-5-21-3636692760-3689470305-3850312049-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders") => 0
NtQueryValueKey(KeyHandle=0xe8, ValueName="Cache", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0x1e97e3032a0, Length=0x208, ResultLength=0xc7414fd890) => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xe8) => 0
NtApphelpCacheControl(ServiceClass=2, ServiceData="") => 0
NtClose(Handle=0xe4) => 0
NtClose(Handle=0xcc) => 0
NtOpenMutant(MutantHandle=0xc7414fe148, DesiredAccess=SYNCHRONIZE, ObjectAttributes=0xa8:"Local\ShimViewer") => 0xc0000034 [2 'The system cannot find the file specified.']
NtClose(Handle=0xc8) => 0
NtClose(Handle=0xa4) => 0
NtUnmapViewOfSection(ProcessHandle=-1, BaseAddress=0x7ff3ca9b0000) => 0
Initial breakpoint
NtTestAlert() => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ffbb8 [0x00007ff71928a000], Size=0xc7414ffbb0 [0x1000], NewProtect=2, OldProtect=0xc7414ffcc0 [8]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ffb38 [0x00007ff71928a000], Size=0xc7414ffb30 [0x1000], NewProtect=4, OldProtect=0xc7414ffc70 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ffb38 [0x00007ff71928a000], Size=0xc7414ffb30 [0x1000], NewProtect=2, OldProtect=0xc7414ffc70 [4]) => 0
NtQueryVolumeInformationFile(FileHandle=0x290, IoStatusBlock=0xc7414ffb90 [0/8], FsInformation=0xc7414ffb80, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa38, IoStatusBlock=0xc7414ffb90 [0/8], FsInformation=0xc7414ffb80, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1e8, IoStatusBlock=0xc7414ffb90 [0/8], FsInformation=0xc7414ffb80, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414fed58 [0x00007ff71928a000], Size=0xc7414fed50 [0x1000], NewProtect=4, OldProtect=0xc7414fee90 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414fed58 [0x00007ff71928a000], Size=0xc7414fed50 [0x1000], NewProtect=2, OldProtect=0xc7414fee90 [4]) => 0
NtOpenKey(KeyHandle=0xc7414fe9e0 [0xf0], DesiredAccess=KEY_READ, ObjectAttributes="\Registry\Machine\System\CurrentControlSet\Control\Nls\Sorting\Versions") => 0
NtQueryValueKey(KeyHandle=0xf0, ValueName="", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xc7414fea00, Length=0x214, ResultLength=0xc7414fec40 [0x2a]) => 0
NtQueryValueKey(KeyHandle=0xf0, ValueName="000605xx", KeyValueInformationClass=1 [KeyValueFullInformation], KeyValueInformation=0xc7414fe400, Length=0x214, ResultLength=0xc7414fe630 [0x42]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ff858 [0x00007ff71928a000], Size=0xc7414ff850 [0x1000], NewProtect=4, OldProtect=0xc7414ff990 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ff858 [0x00007ff71928a000], Size=0xc7414ff850 [0x1000], NewProtect=2, OldProtect=0xc7414ff990 [4]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff719261de0, MemoryInformationClass=0 [MemoryBasicInformation], MemoryInformation=0xc7414ff930, Length=0x30, ReturnLength=0xc7414ff920 [0x30]) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff719261de0, MemoryInformationClass=3 [MemoryRegionInformation], MemoryInformation=0xc7414ff960, Length=0x30, ReturnLength=null) => 0
NtQueryVirtualMemory(ProcessHandle=-1, BaseAddress=0x7ff719261de0, MemoryInformationClass=2 [MemoryMappedFilenameInformation], MemoryInformation=0xc7414ff9c8, Length=0x21a, ReturnLength=null) => 0
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0xf4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-0", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0xf8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-0", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0xf4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0xfc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-1", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x100], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-1", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0xfc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x104], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-2", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x108], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-2", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x104, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x10c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-3", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x110], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-3", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x10c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x114], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-4", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x118], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-4", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x114, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x11c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-5", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0xec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-5", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x11c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x120], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-6", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x124], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-6", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x120, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x128], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-7", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x12c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-7", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x128, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x130], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-8", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x134], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-8", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x130, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x138], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-9", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x13c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-9", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x138, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x140], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-10", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x144], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-10", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x140, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x148], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-11", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x14c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-11", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x148, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x150], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-12", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x154], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-12", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x150, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x158], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-13", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x15c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-13", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x158, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x160], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-14", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x164], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-14", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x160, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x168], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-15", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x16c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-15", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x168, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x170], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-16", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x174], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-16", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x170, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x178], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-17", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x17c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-17", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x178, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x184], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-18", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x188], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-18", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x184, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x18c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-19", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x194], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-19", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x18c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x198], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-20", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1a0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-20", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x198, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-21", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1ac], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-21", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1b0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-22", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-22", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1bc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-23", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1c0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-23", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1c4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-24", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1c8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-24", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1cc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-25", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1d0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-25", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1d4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-26", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-26", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1f4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-27", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x1f8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-27", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x1fc], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-28", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x200], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-28", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x208], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-29", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x20c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-29", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x208, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x210], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-30", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x214], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-30", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x210, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x21c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-31", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x220], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-31", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x21c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x224], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-32", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x228], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-32", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x224, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x22c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-33", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x230], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-33", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x22c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x234], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-34", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x238], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-34", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x234, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x23c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-35", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x240], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-35", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x23c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x244], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-36", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x248], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-36", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x244, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x24c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-37", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x250], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-37", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x24c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x254], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-38", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x258], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-38", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x254, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x25c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-39", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x260], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-39", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x25c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x264], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-40", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x268], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-40", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x264, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x26c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-41", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x274], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-41", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x26c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x278], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-42", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x27c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-42", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x278, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x280], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-43", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x284], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-43", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x280, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x288], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-44", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x28c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-44", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x288, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x298], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-45", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x29c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-45", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x298, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2a4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-46", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2a8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-46", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2ac], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-47", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2b0], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-47", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2b4], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-48", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2b8], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-48", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-49", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-49", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-50", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-50", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2d8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-51", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2dc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-51", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2e0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-52", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-52", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2e8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-53", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2ec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-53", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2f0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-54", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2f4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-54", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x2f8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-55", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x2fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-55", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x300], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-56", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x304], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-56", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x300, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x308], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-57", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x30c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-57", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x308, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x310], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-58", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x314], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-58", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x310, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x318], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-59", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x31c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-59", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x318, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x320], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-60", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x324], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-60", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x320, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x328], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-61", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x32c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-61", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x328, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x330], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-62", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x334], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-62", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x330, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x338], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-63", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x33c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-63", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x338, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x340], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-64", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x344], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-64", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x340, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x348], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-65", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x34c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-65", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x348, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x350], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-66", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x354], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-66", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x350, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x358], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-67", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x35c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-67", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x358, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x360], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-68", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x364], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-68", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x360, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x368], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-69", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x36c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-69", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x368, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x370], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-70", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x374], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-70", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x370, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x378], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-71", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x37c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-71", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x378, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x380], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-72", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x384], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-72", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x380, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x388], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-73", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x38c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-73", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x388, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x390], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-74", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x394], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-74", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x390, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x398], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-75", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x39c], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-75", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x398, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3a0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-76", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3a4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-76", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3a8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-77", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3ac], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-77", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3b0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-78", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3b4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-78", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3b8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-79", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3bc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-79", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3c0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-80", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3c4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-80", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3c8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-81", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3cc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-81", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3d0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-82", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3d4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-82", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3d8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-83", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3dc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-83", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3e0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-84", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3e4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-84", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3e8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-85", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3ec], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-85", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3f0], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-86", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3f4], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-86", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x3f8], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-87", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x3fc], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-87", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x404], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-88", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x408], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-88", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x404, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x40c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-89", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x410], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-89", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x40c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x414], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-90", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x418], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-90", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x414, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x41c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-91", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x420], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-91", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x41c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x424], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-92", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x428], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-92", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x424, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x42c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-93", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x430], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-93", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x42c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x434], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-94", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x438], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-94", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x434, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x43c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-95", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x440], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-95", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x43c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x444], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-96", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x448], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-96", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x444, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x44c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-97", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x450], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-97", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x44c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x454], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-98", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x458], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-98", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x454, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtCreateNamedPipeFile(NamedPipeHandle=0xc7414ff9d0 [0x45c], DesiredAccess=SYNCHRONIZE|GENERIC_READ, ObjectAttributes="\??\pipe\pb158-peek-c-99", IoStatusBlock=0xc7414ffa30 [0/2], ShareAccess=2, CreateDisposition=3, CreateOptions=0x20, MessageType=false, MessageRead=false, NonBlocking=false, MaxInstances=1, InBufferSize=0x1000, OutBufferSize=0x1000, Timeout=0xc7414ff9e0 [-500000]) => 0
NtCreateFile(FileHandle=0xc7414ff928 [0x460], DesiredAccess=SYNCHRONIZE|GENERIC_WRITE|0x80, ObjectAttributes="\??\pipe\pb158-peek-c-99", IoStatusBlock=0xc7414ff960 [0/1], AllocationSize=null, FileAttributes=0, ShareAccess=0, CreateDisposition=1, CreateOptions=0x60, EaBuffer=null, EaLength=0) => 0
NtFsControlFile(FileHandle=0x45c, Event=0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffae0, FsControlCode=0x00110008, InputBuffer=null, InputBufferLength=0, OutputBuffer=null, OutputBufferLength=0) => 0xc00000b2 [535 'There is a process on other end of the pipe.']
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=2 [ProcessIoCounters], ProcessInformation=0xc7414ffc50, Length=0x30, ReturnLength=null) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x4b8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x4b8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x4b8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x4b8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x484], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x484, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x484) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x46c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x46c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x46c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x494], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x494, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x494) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x468], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x468, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x468) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x47c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x47c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x47c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x490], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x490, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x490) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x474], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x474, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x474) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4ac], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x4ac, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4ac) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x498], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x498, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x498) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x470], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x470, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x470) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x4b0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4bc], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4bc, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4bc) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xf4, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0xfc, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x104, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x10c, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x48c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x114, Event=0x48c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x48c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x11c, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x120, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x128, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x130, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x138, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x140, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x148, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x150, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x158, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x160, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x168, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x170, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x178, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x184, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x18c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x198, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1a4, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1b0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1bc, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1c4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1cc, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1d4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1f4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x1fc, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x208, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x210, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x21c, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x224, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x22c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x234, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x23c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x244, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x24c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x254, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x25c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x264, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x26c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x278, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x280, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x288, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x298, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2a4, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2ac, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2b4, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2c8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2d8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e0, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2e8, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f0, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x2f8, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x300, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x308, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x310, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x318, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x320, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x328, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x330, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x338, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x340, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x348, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x350, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x358, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x360, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x478], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x368, Event=0x478, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x478) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x370, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x378, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x380, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x480], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x388, Event=0x480, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x480) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x390, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x398, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3a8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b0, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3b8, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c0, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3c8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d0, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3d8, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e0, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4b4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3e8, Event=0x4b4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4b4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x464], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f0, Event=0x464, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x464) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x3f8, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x404, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x40c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x414, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x49c], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x41c, Event=0x49c, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x49c) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x424, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x488], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x42c, Event=0x488, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x488) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x434, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a8], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x43c, Event=0x4a8, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a8) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x444, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4a4], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x44c, Event=0x4a4, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4a4) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x454, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtCreateEvent(EventHandle=0xc7414ffa78 [0x4c0], DesiredAccess=DELETE|READ_CONTROL|WRITE_DAC|WRITE_OWNER|SYNCHRONIZE|0x3, ObjectAttributes=null, EventType=0 [NotificationEvent], InitialState=false) => 0
NtFsControlFile(FileHandle=0x45c, Event=0x4c0, UserApcRoutine=null, UserApcContext=null, UserIoStatus=0xc7414ffaa0 [0/0x10], FsControlCode=0x0011400c, InputBuffer=null, InputBufferLength=0, OutputBuffer=0x1e97e308d20, OutputBufferLength=0x10) => 0
NtClose(Handle=0x4c0) => 0
NtQueryInformationProcess(ProcessHandle=-1, ProcessInformationClass=2 [ProcessIoCounters], ProcessInformation=0xc7414ffc20, Length=0x30, ReturnLength=null) => 0
NtClose(Handle=0xf4) => 0
NtClose(Handle=0xf8) => 0
NtClose(Handle=0xfc) => 0
NtClose(Handle=0x100) => 0
NtClose(Handle=0x104) => 0
NtClose(Handle=0x108) => 0
NtClose(Handle=0x10c) => 0
NtClose(Handle=0x110) => 0
NtClose(Handle=0x114) => 0
NtClose(Handle=0x118) => 0
NtClose(Handle=0x11c) => 0
NtClose(Handle=0xec) => 0
NtClose(Handle=0x120) => 0
NtClose(Handle=0x124) => 0
NtClose(Handle=0x128) => 0
NtClose(Handle=0x12c) => 0
NtClose(Handle=0x130) => 0
NtClose(Handle=0x134) => 0
NtClose(Handle=0x138) => 0
NtClose(Handle=0x13c) => 0
NtClose(Handle=0x140) => 0
NtClose(Handle=0x144) => 0
NtClose(Handle=0x148) => 0
NtClose(Handle=0x14c) => 0
NtClose(Handle=0x150) => 0
NtClose(Handle=0x154) => 0
NtClose(Handle=0x158) => 0
NtClose(Handle=0x15c) => 0
NtClose(Handle=0x160) => 0
NtClose(Handle=0x164) => 0
NtClose(Handle=0x168) => 0
NtClose(Handle=0x16c) => 0
NtClose(Handle=0x170) => 0
NtClose(Handle=0x174) => 0
NtClose(Handle=0x178) => 0
NtClose(Handle=0x17c) => 0
NtClose(Handle=0x184) => 0
NtClose(Handle=0x188) => 0
NtClose(Handle=0x18c) => 0
NtClose(Handle=0x194) => 0
NtClose(Handle=0x198) => 0
NtClose(Handle=0x1a0) => 0
NtClose(Handle=0x1a4) => 0
NtClose(Handle=0x1ac) => 0
NtClose(Handle=0x1b0) => 0
NtClose(Handle=0x1b4) => 0
NtClose(Handle=0x1bc) => 0
NtClose(Handle=0x1c0) => 0
NtClose(Handle=0x1c4) => 0
NtClose(Handle=0x1c8) => 0
NtClose(Handle=0x1cc) => 0
NtClose(Handle=0x1d0) => 0
NtClose(Handle=0x1d4) => 0
NtClose(Handle=0x1e4) => 0
NtClose(Handle=0x1f4) => 0
NtClose(Handle=0x1f8) => 0
NtClose(Handle=0x1fc) => 0
NtClose(Handle=0x200) => 0
NtClose(Handle=0x208) => 0
NtClose(Handle=0x20c) => 0
NtClose(Handle=0x210) => 0
NtClose(Handle=0x214) => 0
NtClose(Handle=0x21c) => 0
NtClose(Handle=0x220) => 0
NtClose(Handle=0x224) => 0
NtClose(Handle=0x228) => 0
NtClose(Handle=0x22c) => 0
NtClose(Handle=0x230) => 0
NtClose(Handle=0x234) => 0
NtClose(Handle=0x238) => 0
NtClose(Handle=0x23c) => 0
NtClose(Handle=0x240) => 0
NtClose(Handle=0x244) => 0
NtClose(Handle=0x248) => 0
NtClose(Handle=0x24c) => 0
NtClose(Handle=0x250) => 0
NtClose(Handle=0x254) => 0
NtClose(Handle=0x258) => 0
NtClose(Handle=0x25c) => 0
NtClose(Handle=0x260) => 0
NtClose(Handle=0x264) => 0
NtClose(Handle=0x268) => 0
NtClose(Handle=0x26c) => 0
NtClose(Handle=0x274) => 0
NtClose(Handle=0x278) => 0
NtClose(Handle=0x27c) => 0
NtClose(Handle=0x280) => 0
NtClose(Handle=0x284) => 0
NtClose(Handle=0x288) => 0
NtClose(Handle=0x28c) => 0
NtClose(Handle=0x298) => 0
NtClose(Handle=0x29c) => 0
NtClose(Handle=0x2a4) => 0
NtClose(Handle=0x2a8) => 0
NtClose(Handle=0x2ac) => 0
NtClose(Handle=0x2b0) => 0
NtClose(Handle=0x2b4) => 0
NtClose(Handle=0x2b8) => 0
NtClose(Handle=0x2c8) => 0
NtClose(Handle=0x2cc) => 0
NtClose(Handle=0x2d0) => 0
NtClose(Handle=0x2d4) => 0
NtClose(Handle=0x2d8) => 0
NtClose(Handle=0x2dc) => 0
NtClose(Handle=0x2e0) => 0
NtClose(Handle=0x2e4) => 0
NtClose(Handle=0x2e8) => 0
NtClose(Handle=0x2ec) => 0
NtClose(Handle=0x2f0) => 0
NtClose(Handle=0x2f4) => 0
NtClose(Handle=0x2f8) => 0
NtClose(Handle=0x2fc) => 0
NtClose(Handle=0x300) => 0
NtClose(Handle=0x304) => 0
NtClose(Handle=0x308) => 0
NtClose(Handle=0x30c) => 0
NtClose(Handle=0x310) => 0
NtClose(Handle=0x314) => 0
NtClose(Handle=0x318) => 0
NtClose(Handle=0x31c) => 0
NtClose(Handle=0x320) => 0
NtClose(Handle=0x324) => 0
NtClose(Handle=0x328) => 0
NtClose(Handle=0x32c) => 0
NtClose(Handle=0x330) => 0
NtClose(Handle=0x334) => 0
NtClose(Handle=0x338) => 0
NtClose(Handle=0x33c) => 0
NtClose(Handle=0x340) => 0
NtClose(Handle=0x344) => 0
NtClose(Handle=0x348) => 0
NtClose(Handle=0x34c) => 0
NtClose(Handle=0x350) => 0
NtClose(Handle=0x354) => 0
NtClose(Handle=0x358) => 0
NtClose(Handle=0x35c) => 0
NtClose(Handle=0x360) => 0
NtClose(Handle=0x364) => 0
NtClose(Handle=0x368) => 0
NtClose(Handle=0x36c) => 0
NtClose(Handle=0x370) => 0
NtClose(Handle=0x374) => 0
NtClose(Handle=0x378) => 0
NtClose(Handle=0x37c) => 0
NtClose(Handle=0x380) => 0
NtClose(Handle=0x384) => 0
NtClose(Handle=0x388) => 0
NtClose(Handle=0x38c) => 0
NtClose(Handle=0x390) => 0
NtClose(Handle=0x394) => 0
NtClose(Handle=0x398) => 0
NtClose(Handle=0x39c) => 0
NtClose(Handle=0x3a0) => 0
NtClose(Handle=0x3a4) => 0
NtClose(Handle=0x3a8) => 0
NtClose(Handle=0x3ac) => 0
NtClose(Handle=0x3b0) => 0
NtClose(Handle=0x3b4) => 0
NtClose(Handle=0x3b8) => 0
NtClose(Handle=0x3bc) => 0
NtClose(Handle=0x3c0) => 0
NtClose(Handle=0x3c4) => 0
NtClose(Handle=0x3c8) => 0
NtClose(Handle=0x3cc) => 0
NtClose(Handle=0x3d0) => 0
NtClose(Handle=0x3d4) => 0
NtClose(Handle=0x3d8) => 0
NtClose(Handle=0x3dc) => 0
NtClose(Handle=0x3e0) => 0
NtClose(Handle=0x3e4) => 0
NtClose(Handle=0x3e8) => 0
NtClose(Handle=0x3ec) => 0
NtClose(Handle=0x3f0) => 0
NtClose(Handle=0x3f4) => 0
NtClose(Handle=0x3f8) => 0
NtClose(Handle=0x3fc) => 0
NtClose(Handle=0x404) => 0
NtClose(Handle=0x408) => 0
NtClose(Handle=0x40c) => 0
NtClose(Handle=0x410) => 0
NtClose(Handle=0x414) => 0
NtClose(Handle=0x418) => 0
NtClose(Handle=0x41c) => 0
NtClose(Handle=0x420) => 0
NtClose(Handle=0x424) => 0
NtClose(Handle=0x428) => 0
NtClose(Handle=0x42c) => 0
NtClose(Handle=0x430) => 0
NtClose(Handle=0x434) => 0
NtClose(Handle=0x438) => 0
NtClose(Handle=0x43c) => 0
NtClose(Handle=0x440) => 0
NtClose(Handle=0x444) => 0
NtClose(Handle=0x448) => 0
NtClose(Handle=0x44c) => 0
NtClose(Handle=0x450) => 0
NtClose(Handle=0x454) => 0
NtClose(Handle=0x458) => 0
NtClose(Handle=0x45c) => 0
NtClose(Handle=0x460) => 0
done: 100 pipes, 2s, 1600 PeekNamedPipe calls, 0 bytes received
while waiting: kernel counted READ ops +0, OTHER ops +1600
NtWriteFile(FileHandle=0xa38, Event=0, ApcRoutine=null, ApcContext=null, IoStatusBlock=0xc7414fe3f0 [0/0x7d], Buffer=0xc7414fe510, Length=0x7d, ByteOffset=null, Key=null) => 0
NtQueryAttributesFile(ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", Attributes=0xc7414ff5c0 [ARCHIVE]) => 0
NtOpenFile(FileHandle=0xc7414ff608 [0x460], DesiredAccess=SYNCHRONIZE|0x21, ObjectAttributes="\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll", IoStatusBlock=0xc7414ff670 [0/1], ShareAccess=5, OpenOptions=0x60) => 0
NtCreateSection(SectionHandle=0xc7414ff610 [0x43c], DesiredAccess=0xd, ObjectAttributes=null, SectionSize=null, Protect=0x10, Attributes=0x01000000, FileHandle=0x460) => 0
Loaded DLL at 00007FF9BC190000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll
NtMapViewOfSection(SectionHandle=0x43c, ProcessHandle=-1, BaseAddress=0x1e97e307340 [0x00007ff9bc190000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1e97e307258 [0x00031000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
Loaded DLL at 00007FF9C18D0000 C:\WINDOWS\System32\msvcrt.dll
NtMapViewOfSection(SectionHandle=0x428, ProcessHandle=-1, BaseAddress=0x1e97e307830 [0x00007ff9c18d0000], ZeroBits=0, CommitSize=0, SectionOffset=null, ViewSize=0x1e97e307788 [0x00148000], InheritDisposition=1 [ViewShare], AllocationType=0x00800000, Protect=0x80) => 0
NtQueryVolumeInformationFile(FileHandle=0x290, IoStatusBlock=0xc7414ff360 [0/8], FsInformation=0xc7414ff350, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0xa38, IoStatusBlock=0xc7414ff360 [0/8], FsInformation=0xc7414ff350, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtQueryVolumeInformationFile(FileHandle=0x1e8, IoStatusBlock=0xc7414ff360 [0/8], FsInformation=0xc7414ff350, Length=8, FsInformationClass=4 [FsDeviceInformation]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ffb38 [0x00007ff71928a000], Size=0xc7414ffb30 [0x1000], NewProtect=4, OldProtect=0xc7414ffc70 [2]) => 0
NtProtectVirtualMemory(ProcessHandle=-1, BaseAddress=0xc7414ffb38 [0x00007ff71928a000], Size=0xc7414ffb30 [0x1000], NewProtect=2, OldProtect=0xc7414ffc70 [4]) => 0
NtQueryWnfStateData(StateName=0xc7414ff5c0 [0xa3bc1c75], TypeId=null, ExplicitScope=null, ChangeStamp=0xc7414fe514 [0x58b7], Buffer=0xc7414fe568, BufferSize=0xc7414fe510 [0xfb6]) => 0
Process 21064 exit code: 0
